December 25, 2025
5
min read

Polymarket Blames Third-Party Flaw After User Hacks

Jed Barker
Fact checked
Editorially Verified
Editorial fact-check process

This article has been reviewed and verified for accuracy by our editorial team. All claims, data points and platform details are cross-referenced against primary sources.

Data accuracy verified
Sources cross-referenced
Platform details confirmed
View our fact-checking process
svg
Affiliate Disclosure
How Datawallet is funded

Some links on this page are affiliate links. Datawallet may earn a commission when you sign up through them, at no extra cost to you. This never influences our editorial ratings, rankings or recommendations.

Read our full disclosure
svg
Disclaimer
Affiliate Disclosure
How Datawallet is funded

Some links on this page are affiliate links. Datawallet may earn a commission when you sign up through them, at no extra cost to you. Ratings and rankings reflect our own testing and assessment criteria.

Read our full disclosure

GM and Merry Christmas. Polymarket is investigating a third-party login flaw after users reported hacked accounts and drained balances, reviving security concerns from past exploits.

Meanwhile, the EU expands crypto tax reporting under DAC8, Hong Kong tightens digital asset licensing, and the Philippines blocks unregistered exchanges.

Here’s the latest in crypto as the holidays roll on. 🎄 👇

Datawallet Newsletter
Get the brief in your inbox
Every Monday, Wednesday and Friday · free forever
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
01

Polymarket Blames Third-Party Flaw After User Hacks

Polymarket confirmed this week that multiple user accounts were hacked through a vulnerability in a third-party authentication provider, after complaints surfaced on X and Reddit. Users reported drained balances following repeated login attempts, despite basic security precautions.

Affected users described receiving multiple login alerts before positions were force-closed and funds emptied, even without clicking phishing links or compromising devices. Several accounts reportedly used email-based wallet access designed for onboarding new crypto users to the prediction market.

Polymarket acknowledged the breach on its Discord, saying a third-party provider introduced the flaw and that the issue has been resolved. The company did not disclose the number of victims or value stolen in the incident.

The incident revives past concerns after similar third-party login exploits drained wallets in September 2024 and a later phishing campaign stole over $500,000. Polymarket said it will contact affected users and that no ongoing risk remains.

02

EU DAC8 Expands Crypto Tax Reporting

The European Union will implement DAC8 on Jan. 1, expanding tax reporting rules to crypto service providers. The directive requires exchanges and brokers to collect detailed user and transaction data for automatic sharing among EU tax authorities. Regulators say the change closes long standing reporting gaps that left crypto assets outside traditional financial transparency frameworks.

DAC8 operates separately from MiCA, focusing on tax enforcement rather than licensing, conduct, or consumer protection standards. Crypto firms must update reporting systems and due diligence controls by July 1 to meet compliance requirements. Authorities can coordinate cross border enforcement, including asset freezes or seizures, when unpaid taxes or evasion are detected.

03

Hong Kong Advances Crypto Licensing Regime

Hong Kong regulators will legislate new licensing requirements for crypto dealing and custody firms following completed public consultations. The framework requires firms offering virtual asset trading or custody services to obtain regulatory approval before operating locally. Officials say the move strengthens oversight as crypto activity expands within the city’s regulated financial system.

The initiative builds on earlier reforms, including the Stablecoin Ordinance and mandatory exchange licensing introduced after 2020. Regulators say the combined framework aims to support tokenization, stablecoins, and digital asset services under consistent supervision. Authorities argue clear licensing rules reinforce Hong Kong’s role as a trusted gateway between global capital and digital markets.

04

Philippines Blocks Unlicensed Crypto Platforms

Internet providers in the Philippines have begun blocking major crypto exchanges as regulators enforce local licensing requirements. Users reported losing access to Coinbase and Gemini after orders issued by the National Telecommunications Commission. The action follows central bank findings that dozens of platforms were operating without authorization.

Officials say the policy reflects a shift from tolerance toward strict territorial enforcement of crypto market access rules. Similar measures previously targeted Binance after a compliance deadline expired in early 2024. Regulators say licensed platforms may continue operating while unregistered exchanges face technical and application level restrictions.

05

Data of the Day

Bitcoin’s $126,000 record high falls below $100,000 when adjusted for inflation using 2020 purchasing power. Galaxy Research calculated the inflation adjusted peak at $99,848 based on cumulative Consumer Price Index changes. The analysis highlights how nominal price milestones differ from real value comparisons over time.

US inflation has reduced dollar purchasing power by roughly 20% since 2020, according to federal data. Rising prices and a weakening dollar have fueled interest in assets viewed as inflation hedges. Analysts say real value metrics provide additional context when assessing long term crypto market performance.

Inflation Adjusted Bitcoin Misses $100,000 Mark
06

More Breaking News

For the latest updates on digital asset markets, follow us on X @Datawalletcom.

For the latest updates on digital asset markets, follow us on X @Datawalletcom.

Datawallet Newsletter

Get tomorrow’s issue in your inbox

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Join 100,000+ investors · three mornings a week · free forever