This is the second time Polymarket users have lost funds due to exploits Polymarket has blamed on third-party vendors. In June, customers lost almost $3 million after a malicious script was injected into the frontend. They reimbursed user losses then, and have said they will do the same in this incident as well.
Polymarket users' funds stolen, again
Polymarket users have lost a combined, estimated $2.65 million after a Polymarket exploit. The company acknowledged there had been "an incident" and put the site into "cancel-only" mode, meaning that all bets were disabled outside of cancelling them. They later, once again, claimed that the issue is due to the compromise of a "third-party provider", and re-enabled trading after about an hour.
North Korea hacks Binance for around $6.3 billion, some frozen
Binance has confirmed that an attacker exploited the exchange, stealing around $6.3 billion from multiple hot wallets. The theft has set the new record for the largest crypto theft.
Luckily for Binance, Tether and Circle quickly began freezing some of the exploiter's wallets. Tether froze at least $1.567 billion of the roughly $1.768 billion in stolen USDT, and Circle froze around $800 million of the $823 million in USDC. Binance estimated that $3 billion in total was frozen, though some other networks that have frozen assets are preventing the attacker from cashing out, but may not be able to easily restore them to Binance.
Binance founder Changpeng Zhao, who is not legally allowed to run the exchange yet seems to remain very closely aware of its inner workings, posted early estimates of the freezes and wrote, "I don’t manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered." He later added, "Loss might be a bit higher than [$1 billion], but will cover." Binance later disclosed that they believed the exploit occurred after a devops employee's laptop was compromised.
Blockchain security firm TRM Labs subsequently attributed the attack to TraderTraitor, a North Korean state-sponsored cybercrime group also known as the Lazarus Group. They have been behind many of the largest cryptocurrency thefts, including the now second-largest hack of all time: the 2025 theft of $1.5 billion from the Bybit exchange.
Blur NFT marketplace to shut down
Blur, the NFT marketplace that overtook OpenSea in trading volume shortly after its 2022 launch, announced it will shut down its website in a month. They also announced that Blend, Blur's NFT lending platform, will stop matching new loans on the same day. Borrowers have until then to repay their loans or let them default.
The announcement comes days after the Blur team said it would also shut down Blast, its Ethereum layer-2 blockchain, because it cost more to run than it earned.