Polymarket Rotates Key, Strips All Production Access After Leak of 6-Year-Old Private Key

Josh, a representative of prediction market Polymarket, said neither Polymarket nor UMA contracts were exploited and that all user funds remain safe. He added that Polymarket.com has not been impacted and the platform is operating normally. The incident was traced to a compromised six-year-old private key used for internal deposit configuration, which led to funds being sent to the address tied to that key. Polymarket has rotated the key, revoked all production-environment permissions, and plans to migrate all private keys to a KMS key management system.