Back Kucoin

Polymarket completes private key rotation and plans to migrate all keys to KMS.

Kucoin • May 23, 2026

Odaily Planet Daily reports: Josh, Vice President of Engineering and DeFi at the prediction market Polymarket, posted on X that the security incident was caused by a private key that had been compromised for six years; this key was used for internal top-up configurations, which is why some funds were sent to that address.

Josh added that the Polymarket team has completed private key rotation, revoked all production environment permissions, and plans to migrate all private keys to a Key Management Service (KMS) rather than continuing to store them traditionally. Additionally, neither Polymarket nor its UMA contracts have been compromised; all user funds are secure, and the platform remains fully operational.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Polymarket Resolves Security Incident with Key Rotation and KMS Migration Polymarket, a prediction market platform, experienced a security incident due to a private key that had been compromised for six years. This key was utilized for internal deposit configurations, leading to some funds being sent to related addresses. The company has successfully completed a private key rotation and revoked all production environment permissions. Furthermore, Polymarket plans to migrate all private keys to a Key Management Service (KMS) to enhance security. Importantly, neither Polymarket nor its UMA contracts were compromised, ensuring that all user funds remain secure and the platform continues to operate normally. The incident highlights the risks associated with long-term key management practices. 2 sources 37

Polymarket completes private key rotation and plans to migrate all keys to KMS.

The full story

Extracted Entities

Attack Types (1)

Companies (1)