Polymarket suffers hacker attack due to flaws in the synchronization mechanism between off-chain and on-chain transaction results
According to GoPlus Chinese Community, as reported by ChainCatcher, the prediction market platform Polymarket suffered a hacker attack due to a design flaw in the synchronization mechanism between off-chain and on-chain trading results in its order system.
The attacker manipulated the nonce, causing on-chain matched trades to be canceled or invalidated before settlement, while off-chain records remained effective. This led to API misreporting, affecting trading bots such as Negrisk and resulting in user losses. The attack process is analyzed as follows: 1. The attacker submits/matches large reverse trades with the market-making bot on Polymarket's off-chain orderbook. 2. The attacker constructs transactions with forged/duplicate nonces or exploits on-chain nonce competition, ensuring the on-chain transaction will revert. 3. The Polymarket API returns a "trade successful" message to the bot before on-chain confirmation, causing the bot to believe its position is hedged, while the actual on-chain state has not changed. 4. The attacker then executes real on-chain trades to take the exposed direction of the bot, thereby profiting "risk-free." 5. Since the revert occurs at the chain level, Polymarket fees do not explode, keeping attack costs controllable and allowing continuous execution. GoPlus recommends users pause automated trading tools, verify on-chain transaction status, enhance wallet security, and closely follow official Polymarket announcements.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Subscription multiplier reaches 4 times! "AI Ring" Oura IPO receives enthusiastic response
Smart ring manufacturer Oura's IPO was oversubscribed by approximately four times, planning to issue 50 million shares at a maximum price of $44 per share, aiming to raise up to $2.2 billions, with a fully diluted valuation of about $15 billions. Against the backdrop of companies like Holtec Nuclear withdrawing their IPO plans due to market conditions, Oura is expected to become the first major IPO in nearly three months to raise over $1 billion, injecting new vitality into the long-dormant U.S. IPO market.
The Bank of Japan's interest rate hike still fails to impress the market! Hedge funds slash yen long positions by nearly 80%, while dollar long positions increase significantly
After the Bank of Japan failed to deliver a clear enough signal of further interest rate hikes to the market, hedge funds have significantly reduced their bullish bets on the yen.
US Treasury yields continue to rise! Cleveland Federal Reserve President: Government and AI compete for funds, fueling rate hike expectations
Cleveland Federal Reserve President Loretta Mester stated on Friday that the recent sustained rise in long-term U.S. Treasury yields is the result of multiple factors working together.
Crypto prices
More
