Bubblemaps

Sharp

ZachXBT

Polygon (Old)

Polymarket

Prediction market Polymarket lost more than $573,000 in a private key breach on Friday, hours after South Korea's media regulator opened a probe into whether the platform amounts to illegal gambling.
<h2 id="polymarket-hack-drains-internal-wallet">Polymarket Hack Drains Internal Wallet</h2>
The attack surfaced on Friday when on-chain investigator ZachXBT<a href="https://www.coindesk.com/markets/2026/05/22/zachxbt-flags-usd520k-polymarket-exploit-on-polygon-team-says-funds-are-safe" rel="noopener noreferrer nofollow">flagged</a> suspicious outflows tied to Polymarket on the Polygon network. Analytics firm Bubblemaps then <a href="https://www.banklesstimes.com/articles/2026/05/22/polymarket-suffers-600k-private-key-breach-user-funds-safe/" rel="noopener noreferrer nofollow">warned</a> users to pause activity as the attacker steadily pulled roughly 5,000 POL tokens every 30 seconds.
The stolen assets moved across 16 wallets before reaching crypto exchanges.
Polymarket's developer account <a href="https://x.com/PolymarketDevs/status/2057755280641814769" rel="noopener noreferrer nofollow">said</a> trading infrastructure and customer balances were untouched. Engineering staffer Josh Stevens described the cause as a six-year-old private key linked to an internal top-up wallet, not a contract failure. He later confirmed that responders froze $164,000 of the $573,200 drained.
Also Read:<a href="https://yellow.com/news/goldman-walks-away-xrp-solana-q1-reset" rel="noopener noreferrer nofollow">Goldman Sachs Walks Away From XRP, Solana In Sharp Q1 Crypto Reset</a>
<h2 id="south-korea-probe-adds-pressure">South Korea Probe Adds Pressure</h2>
The breach landed as Polymarket faced fresh scrutiny abroad. South Korea's Korea Communications Standards Commission has opened a formal review into whether the prediction market hosts illegal gambling content under national law.
A commission official said the review <a href="https://en.bloomingbit.io/feed/news/112569" rel="noopener noreferrer nofollow">followed</a> a recent complaint against the platform.
Analysts note the timing matters because the compromised wallet sat near Polymarket's UMA CTF Adapter, the layer that settles prediction markets through an oracle. Stevens stressed that the administrative reward wallet operates separately from that resolution machinery, which limited the damage.
Researchers say the adapter is custom code that <a href="https://cryptonews.com/news/polymarket-520k-smart-contract-exploit-breakdown/" rel="noopener noreferrer nofollow">sits</a> outside the audited core protocol, a recurring weak point for prediction markets. South Korea could move to block access, mirroring steps already taken by France, Germany and Italy.
<h2 id="regulatory-crackdown-widens">Regulatory Crackdown Widens</h2>
Polymarket has spent 2026 absorbing enforcement actions on several fronts. The Korean inquiry follows earlier shutdown orders in Portugal and Hungary, civil action in Nevada, and cease-and-desist notices from Tennessee.
The platform secured U.S. approval from the Commodity Futures Trading Commission in late 2025, yet state regulators have continued pressing their own claims. That tension has left Polymarket expanding and contracting at once, banned in dozens of jurisdictions while courting fresh capital. The company was in talks in Apr. 2026 to raise about <a href="https://yellow.com/news/polymarket-400m-raise-15b-valuation" rel="noopener noreferrer nofollow">$400 million at a roughly $15 billion valuation</a>.
Read Next:<a href="https://yellow.com/news/bitcoin-demand-4-month-low-consolidation" rel="noopener noreferrer nofollow">Bitcoin Demand Crashes To 4-Month Low, Risks Deep Consolidation Phase</a>

A Six-Year-Old Key Just Cost Polymarket $573K On Its Worst Friday

Table of Contents

Yellow News

Other articles published on May 22, 2026

Join our free newsletter for daily crypto updates!