Attention

Terra

Polymarket

Record

Gains

Polymarket has dismissed a dark web seller's claim of a customer data breach, saying the 300,000 records on offer were already publicly accessible through its on-chain feeds and APIs.
<h2 id="hacker-listing-and-polymarket-reply">Hacker Listing And Polymarket Reply</h2>
A dark web actor using the handle "xorcat" <a href="https://www.cryptotimes.io/2026/04/29/polymarket-rejects-breach-claims-amid-300k-record-leak-reports/" rel="noopener noreferrer nofollow">posted</a> on DarkForums on Tuesday, claiming to have pulled more than 300,000 records, including 10,000 user profiles with names, profile images and wallet addresses.
The post was flagged by Dark Web Informer and cybersecurity firm Vecert Analyzer.
Polymarket called the reports "complete and utter nonsense." The platform said the data sits behind public endpoints and on-chain records that any developer can pull for free.
xorcat said the dataset was <a href="https://thecybersecguru.com/news/polymarket-breach-xorcat-data-leak/" rel="noopener noreferrer nofollow">assembled</a> through undocumented API endpoints, a pagination bypass and a CORS misconfiguration on the Gamma and CLOB APIs.
Also Read:<a href="https://yellow.com/news/worldcoin-wld-token-52m-volume-digital-identity-narrative" rel="noopener noreferrer nofollow">Worldcoin Sees $52M In Volume As Digital Identity Narrative Regains Attention</a>
<h2 id="researchers-and-bounty-program">Researchers And Bounty Program</h2>
The seller said the dump was justified because Polymarket runs no bug bounty program. That claim is incorrect.
A live program <a href="https://cointelegraph.com/news/polymarket-says-hacker-is-selling-publicly-available-data-while-claiming-security-breach" rel="noopener noreferrer nofollow">opened</a> on April 16 and has logged 446 reports as of Wednesday, according to its Cantina listing.
Vladimir S, chief security officer at Legalblock, said the listing looks like parsed public data dressed up as a database leak rather than a real breach.
Polymarket has been hit before. Account drains tied to a third-party login provider surfaced in late 2025, and an off-chain nonce manipulation attack struck trading bots in February, neither of which touched the platform's core contracts.
Read Next:<a href="https://yellow.com/news/terra-luna-classic-lunc-gains-5-percent" rel="noopener noreferrer nofollow">Terra Luna Classic Gains 5.3% As Community Burn Attention Returns</a>

Polymarket Denies 300K Record Breach, Calls Hacker Claims Nonsense

Table of Contents

Yellow News

Other articles published on Apr 29, 2026

Join our free newsletter for daily crypto updates!