Polymarket suspected of being hacked, with over 300,000 records leaked

According to a disclosure by Dark Web Informer on X, the decentralized prediction market platform Polymarket is suspected to have been breached, with over 300 thousand records and exploit toolkits leaked to a cybercrime forum. The attacker claims to have obtained the data through undocumented API endpoints, pagination bypass, and CORS misconfiguration, with the data extracted on April 27, 2026. The leaked data includes around 10 thousand user identity details, 41 thousand comments, 485 thousand market metadata entries, 250 thousand active CLOB markets, and addresses of 292 event submitters and resolvers, as well as multiple vulnerability proof-of-concept codes.