Polymarket resumes trading after a security incident with a third-party provider, which a source says is DebugBear, and says it will reimburse affected traders

Your open trades will be settled correctly and you will be reimbursed for any losses due to the incident.

Polymarket has resumed trading after a security incident affecting its platform and trading API. The incident, which lasted for approximately one hour on October 29, 2026, was caused by a compromise at a third-party provider, identified by a source as DebugBear. During the outage, Polymarket was in cancel-only mode with relayer actions paused. The company has stated that all affected traders will be reimbursed. Polymarket has also referred the incident to law enforcement and is working to restore full functionality. The exchange is now operating under normal conditions, with trading resuming after the investigation and resolution of the third-party issue.

The incident highlights the critical reliance of decentralized exchanges on third-party infrastructure providers. A compromise in one of these external services can have cascading effects, leading to service disruptions and potential financial losses for users, as seen with Polymarket and DebugBear. This underscores the need for robust security practices and contingency planning across the entire Web3 ecosystem, especially for platforms handling financial transactions.

Polymarket's commitment to reimbursing affected traders is a significant step in maintaining user trust and confidence following a major security lapse. It also sets a precedent for how decentralized platforms should handle such incidents, prioritizing user protection over immediate profit. The company's proactive communication and engagement with law enforcement suggest a more mature and responsible approach to operational risks within the nascent crypto exchange market.