<p>去中心化预测市场平台 Polymarket 确认多个用户受到最近涉及第三方认证提供商的安全漏洞影响。</p>
<p>本周早些时候，关于账户被黑的报告开始在 X 和 Reddit 上出现，受影响的用户在社交媒体上详细描述了他们的损失。</p>
<p>一位用户在 Reddit 上写道：&#34;今天我醒来看到有 3 次尝试登录 Polymarket——我的设备没有被攻破，谷歌没有发现任何可疑活动，其他服务都正常。&#34; &#34;所以我去 Polymarket，发现我所有的交易都已关闭，余额为 $0.01。&#34;</p>
<p>另一位用户在评论区声称经历了类似的安全漏洞，在资金从他们的 Polymarket 账户中被提取之前，收到了三次尝试登录的通知，尽管他们没有点击任何链接，并且在电子邮件上启用了双重身份验证。</p>
<p>根据社交媒体上的用户报告，该问题似乎影响了通过 Magic Labs 注册的 Polymarket 用户，Magic Labs 允许用户通过电子邮件地址登录并创建非托管的以太坊钱包。Magic Labs 注册被首次接触加密货币的用户广泛使用，这些用户通常没有数字资产钱包。</p>
<p><strong>没有持续风险</strong></p>
<p>周二，Polymarket 在其官方 Discord 频道上承认了安全问题。</p>
<p>Polymarket 写道：&#34;我们最近识别并解决了影响少数用户的安全问题。&#34; &#34;该问题是由第三方认证提供商引入的漏洞造成的。&#34;</p>
<p>然而，Polymarket 并未透露受影响用户的数量或因此被盗的价值。它也没有透露核心问题的第三方提供商。该平台表示已解决该问题，并且没有持续的风险。</p>
<p>Polymarket 补充道：&#34;我们将与受影响的用户联系。&#34; The Block 已联系 Polymarket 以获取有关此情况的进一步信息。</p>
<p><strong>重复出现的问题</strong></p>
<p>最新的安全漏洞与该平台之前报告的安全事件相呼应。</p>
<p>在 2024 年 9 月，通过 Google 账户登录的多个用户报告了钱包被掏空的情况，攻击者利用 &#34;代理&#34; 功能调用将用户的 USDC 资金转移到钓鱼地址。当时，Polymarket 将这些事件视为可能与第三方认证提供商相关的针对性攻击。</p>
<p>另外，上个月利用该平台评论区进行的钓鱼活动导致用户损失超过 50 万美元。诈骗者发布伪装链接到欺诈网站，诱导用户进行电子邮件登录。</p>
<p>免责声明：The Block 是一家独立媒体机构，提供新闻、研究和数据。截至 2023 年 11 月，Foresight Ventures 是 The Block 的主要投资者。Foresight Ventures 还投资于其他加密领域的公司。加密交易所 Bitget 是 Foresight Ventures 的主要有限合伙人。The Block 继续独立运营，提供关于加密行业的客观、影响深远和及时的信息。以下是我们当前的财务披露。</p>
<p>© 2025 The Block. 保留所有权利。本文仅供信息参考。并不提供或意图作为法律、税务、投资、金融或其他建议。</p>

<p>Polymarket，一个去中心化的预测市场平台，确认由于第三方认证提供商的漏洞，导致用户受到安全 breach 的影响。用户报告了账户被黑和资金被盗的情况，特别是那些通过 Magic Labs 注册的用户。Polymarket 解决了这一问题，表示没有持续的风险，但没有透露受影响用户的数量或相关提供商的信息。此次事件发生在平台之前的安全问题之后，包括网络钓鱼攻击。Polymarket 计划联系受影响的用户</p>

<p>Decentralized prediction market platform Polymarket confirmed that multiple users were affected by a recent security breach involving a third-party authentication provider.</p>
<div class="lb-trans"><p>去中心化预测市场平台 Polymarket 确认多个用户受到最近涉及第三方认证提供商的安全漏洞影响。</p>
</div><p>Reports of account hacks began surfacing earlier this week on X and Reddit, as affected users took to social media to detail their losses.</p>
<div class="lb-trans"><p>本周早些时候，关于账户被黑的报告开始在 X 和 Reddit 上出现，受影响的用户在社交媒体上详细描述了他们的损失。</p>
</div><p>&#34;Today I woke up and see 3 attempts to login to polymarket — My device isn’t compromised, google found nothing suspicious, all other services are fine,&#34; one user wrote on Reddit. &#34;So I went to Polymarket and realized that all my deals were closed and balance is $0.01.&#34;</p>
<div class="lb-trans"><p>一位用户在 Reddit 上写道：&#34;今天我醒来看到有 3 次尝试登录 Polymarket——我的设备没有被攻破，谷歌没有发现任何可疑活动，其他服务都正常。&#34; &#34;所以我去 Polymarket，发现我所有的交易都已关闭，余额为 $0.01。&#34;</p>
</div><p>Another user in the comment section claimed to have experienced a similar security breach, receiving three attempted login notifications before funds were drained from their Polymarket account, despite not clicking any links and having two-factor authentication enabled on their email.</p>
<div class="lb-trans"><p>另一位用户在评论区声称经历了类似的安全漏洞，在资金从他们的 Polymarket 账户中被提取之前，收到了三次尝试登录的通知，尽管他们没有点击任何链接，并且在电子邮件上启用了双重身份验证。</p>
</div><p>According to user reports on social media, the issue appears to have affected users who signed up for Polymarket through Magic Labs, which lets users sign in via email addresses and creates non-custodial Ethereum wallets. Magic Labs sign-up is widely used by first-time crypto users who do not already have digital asset wallets.</p>
<div class="lb-trans"><p>根据社交媒体上的用户报告，该问题似乎影响了通过 Magic Labs 注册的 Polymarket 用户，Magic Labs 允许用户通过电子邮件地址登录并创建非托管的以太坊钱包。Magic Labs 注册被首次接触加密货币的用户广泛使用，这些用户通常没有数字资产钱包。</p>
</div><p><strong>No ongoing risks</strong></p>
<div class="lb-trans"><p><strong>没有持续风险</strong></p>
</div><p>On Tuesday, Polymarket acknowledged the security issue on its official Discord channel.</p>
<div class="lb-trans"><p>周二，Polymarket 在其官方 Discord 频道上承认了安全问题。</p>
</div><p>&#34;We recently identified and resolved a security issue affecting a small number of users,&#34; Polymarket wrote. &#34;The issue was caused by a vulnerability introduced by a third-party authentication provider.&#34;</p>
<div class="lb-trans"><p>Polymarket 写道：&#34;我们最近识别并解决了影响少数用户的安全问题。&#34; &#34;该问题是由第三方认证提供商引入的漏洞造成的。&#34;</p>
</div><p>Polymarket did not, however, reveal the number of affected users or the value stolen as a result. It also did not name the third-party provider at the core of the issue. The platform stated it has resolved the issue and that no lingering risks remain.</p>
<div class="lb-trans"><p>然而，Polymarket 并未透露受影响用户的数量或因此被盗的价值。它也没有透露核心问题的第三方提供商。该平台表示已解决该问题，并且没有持续的风险。</p>
</div><p>&#34;We will be in contact with impacted users,&#34; Polymarket added. The Block has reached out to Polymarket for further information on the situation.</p>
<div class="lb-trans"><p>Polymarket 补充道：&#34;我们将与受影响的用户联系。&#34; The Block 已联系 Polymarket 以获取有关此情况的进一步信息。</p>
</div><p><strong>Recurring issue</strong></p>
<div class="lb-trans"><p><strong>重复出现的问题</strong></p>
</div><p>The latest breach echoes earlier security incident reported on the platform.</p>
<div class="lb-trans"><p>最新的安全漏洞与该平台之前报告的安全事件相呼应。</p>
</div><p>In September 2024, several users who logged in via Google accounts reported wallet drains, where attackers used &#34;proxy&#34; function calls to move users' USDC funds to phishing addresses. Polymarket at the time investigated the incidents as potentially targeted exploits linked to a third-party authentication provider.</p>
<div class="lb-trans"><p>在 2024 年 9 月，通过 Google 账户登录的多个用户报告了钱包被掏空的情况，攻击者利用 &#34;代理&#34; 功能调用将用户的 USDC 资金转移到钓鱼地址。当时，Polymarket 将这些事件视为可能与第三方认证提供商相关的针对性攻击。</p>
</div><p>Separately, a phishing campaign exploiting the platform's comment sections last month resulted in more than $500,000 in user losses. Scammers posted disguised links to fraudulent sites, prompting email logins.</p>
<div class="lb-trans"><p>另外，上个月利用该平台评论区进行的钓鱼活动导致用户损失超过 50 万美元。诈骗者发布伪装链接到欺诈网站，诱导用户进行电子邮件登录。</p>
</div><p>Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.</p>
<div class="lb-trans"><p>免责声明：The Block 是一家独立媒体机构，提供新闻、研究和数据。截至 2023 年 11 月，Foresight Ventures 是 The Block 的主要投资者。Foresight Ventures 还投资于其他加密领域的公司。加密交易所 Bitget 是 Foresight Ventures 的主要有限合伙人。The Block 继续独立运营，提供关于加密行业的客观、影响深远和及时的信息。以下是我们当前的财务披露。</p>
</div><p>© 2025 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.</p>
<div class="lb-trans"><p>© 2025 The Block. 保留所有权利。本文仅供信息参考。并不提供或意图作为法律、税务、投资、金融或其他建议。</p>
</div>

Polymarket 指出最近用户账户被黑是由于第三方漏洞