Polymarket suspended trading on its international platform after a security breach involving one of its third-party providers. Users first raised the alarm on social media, reporting that funds had been withdrawn from their accounts without authorization. The incident affected people holding balances on the international venue; checks confirmed that some accounts had been drained. Polymarket said it had identified and fixed the issue, but did not identify the provider or disclose how many users were affected or how much was lost.
The company said it would reimburse affected users and had referred the breach to law enforcement. Trading remained halted as it responded to the incident. The episode highlights how a platform’s reliance on outside service providers can expose users to losses even when the breach does not originate in the platform’s own systems. For users, the immediate concerns are recovery of their funds and when trading will resume; for Polymarket, the response depends on fulfilling its reimbursement pledge and restoring confidence in the security of its international service.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a network-reachable use-after-free in Linux’s IPv4 TCP handshake, with researchers demonstrating remote root code execution in a lab using an MPTCP listener. Administrators should inventory exposed Linux services, prioritize MPTCP hosts, install their vendor’s fixed kernel, and reboot into it. (penligent.ai)
Arken is passwordless authentication middleware that verifies decentralized identity signatures made with secp256k1 keys. It is designed to work without passwords or server-side sessions. (github.com)
Go 1.24 enables Multipath TCP by default for Linux listening sockets, exposing servers to attacks involving Linux kernel CVE-2026-98432. Go offers settings to disable MPTCP, but recommends upgrading to a patched kernel because disabling it per program is an unreliable fix. (groups.google.com)
Highway thieves have stolen more than $100 million in data center equipment since June using hacked freight accounts, fake drivers, and GPS spoofing. Targets include servers, fiber-optic cables, chips, copper wire, and power equipment. (arstechnica.com)
Arkham’s explorer page identifies an entity called “Binance-hacker-1029” and attributes $5.6 billion in theft from Binance to it. The attribution is an unverified claim, not proof that the funds were stolen. (arkm.com)
Unconfirmed reports say a Binance wallet was drained into a new address, with the transaction funded through Tornado Cash. Posts later claimed as much as $3 billion may have been extracted, but the incident remains unverified. (twitter.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.