Polymarket executive: Private key rotation completed, all private keys will be migrated to KMS in the future

Jinse Finance reported that Josh, VP of Engineering and DeFi at the prediction market Polymarket, stated on X that the recent security incident was caused by the leak of a private key that has existed for six years. This private key was used for internal top-up configurations, which explains why some funds were sent to this address. The Polymarket team has now completed a private key rotation, revoked all production environment permissions, and plans to migrate all private keys to a Key Management Service (KMS) rather than storing them traditionally. Additionally, neither Polymarket nor its UMA contracts have been exploited, all user funds are safe, and the platform remains fully operational.