Polymarket Resolves Security Incident with Key Rotation and KMS Migration

• •A private key compromised for six years led to a security incident at Polymarket.
• •The platform has completed private key rotation and plans to migrate to a Key Management Service.
• •All user funds are secure, and there was no compromise of Polymarket's UMA contracts.

Polymarket, a prediction market platform, experienced a security incident due to a private key that had been compromised for six years. This key was utilized for internal deposit configurations, leading to some funds being sent to related addresses. The company has successfully completed a private key rotation and revoked all production environment permissions. Furthermore, Polymarket plans to migrate all private keys to a Key Management Service (KMS) to enhance security. Importantly, neither Polymarket nor its UMA contracts were compromised, ensuring that all user funds remain secure and the platform continues to operate normally. The incident highlights the risks associated with long-term key management practices.