Decentralized prediction market Polymarket finds itself at the center of an explosive controversy. The Wall Street Journal has lifted the lid on a massive fraud attempt and internal trade-offs that allegedly prioritized growth at the expense of security.

Hackers, compromised accounts, a CEO under pressure: the platform’s image, already in the crosshairs of US regulators, has taken another serious hit. Here is what the investigation reveals.

Behind the record-breaking volumes posted by Polymarket lies a far murkier reality, one in which compliance appears to have been sacrificed on the altar of rapid growth.

A $10 Million Fraud Attempt at the Heart of the Platform

According to the Wall Street Journal, Polymarket was the target of a fraud attempt of unusual scale for a decentralized prediction market. The amount at stake: $10 million, mobilized as part of a coordinated attack designed to manipulate betting outcomes or siphon funds from the platform.

The precise mechanics of the scheme remain partially undisclosed, but the sheer scale of the operation illustrates just how much on-chain prediction markets have become prime targets for malicious actors. Polymarket’s growing liquidity — which hit record volumes during the 2024 US elections — has effectively made it a full-fledged financial infrastructure, complete with all the risks that entails.

Separately, the WSJ reports that a distinct attack allowed hackers to compromise nearly 500 user accounts by exploiting stolen personal data. This breach raises fundamental questions about the robustness of the authentication protocols and data protection measures the platform has put in place.

Growth at All Costs: The CEO at the Center of Internal Tensions

The Wall Street Journal investigation also points to significant internal friction within Polymarket. According to sources cited by the publication, the platform’s CEO allegedly prioritized commercial expansion over internal warnings about compliance risks. This stance is not unlike the dynamics seen at other crypto players that scaled too quickly without adequate regulatory infrastructure in place.

This kind of tension between growth and compliance is structural across the crypto industry. But for Polymarket, the context is particularly sensitive: the platform already reached a settlement with the CFTC in 2022, barring it from serving US-based users. Despite this, reports have consistently flagged the presence of US-based bettors on the platform, fueling ongoing scrutiny from regulators.

Ignoring internal red flags within this regulatory environment represents an existential risk. Should US authorities establish a direct link between compliance failures and the fraud incidents, the legal consequences for the platform could be severe.

Polymarket Faces a Long-Term Credibility Challenge

These revelations come at a pivotal moment for decentralized prediction markets. Polymarket has established itself as the benchmark in the space, particularly through its coverage of major political events. But user trust rests on two inseparable pillars: data reliability and the security of funds. Both are now being called into question.

The compromise of 500 accounts via stolen personal data points to a vulnerability at the identity management level — a classic attack vector, but a devastatingly effective one. For a platform that positions itself as decentralized, its reliance on KYC data or centralized authentication systems represents a structural paradox that is increasingly difficult to ignore.

The next step for Polymarket will be to demonstrate, through concrete action, that security and compliance are non-negotiable. Without a transparent response and documented corrective measures, the platform risks seeing its reputation erode at precisely the moment when prediction markets are gaining institutional legitimacy.