根據 Polymarket 於 4 月 29 日在 X 貼文，網路安全帳號 Dark Web Informer 指控去中心化預測市場平台 Polymarket 遭到入侵，超過 30 萬筆記錄及一個漏洞利用工具包被洩露至網路犯罪論壇；Polymarket 隨即在 X 聲明否認，表示所有鏈上數據公開可審計。
Polymarket 官方回應
根據 Polymarket 於 2026 年 4 月 29 日在 X 平台發布的聲明，平台表示其所有鏈上數據均為公開可審計，任何人均可透過公開 API 免費取用，無需付費。Polymarket 在聲明中將此定性為「功能而非漏洞（a feature, not a bug）」。
Polymarket 同時指出，平台設有 500 萬美元的漏洞賞金計劃，與攻擊者聲稱「Polymarket 沒有漏洞賞金計劃」的說法相矛盾；並明確說明，攻擊公共 API 端點的行為不符合賞金申領資格。
Dark Web Informer 的指控內容與技術細節
根據 Dark Web Informer 於 2026 年 4 月 29 日在 X 平台的貼文，攻擊者「xorcat」聲稱透過 Polymarket 的 Gamma 和 CLOB API 中的未公開端點、分頁繞過及 CORS 配置錯誤，於 2026 年 4 月 27 日完成數據提取。Dark Web Informer 披露的指控數據規模如下：
· 總計超過 30 萬筆記錄，提取後約 750 MB，壓縮後約 8.3 MB
· 約 1 萬個含完整個人識別資訊（PII）的唯一用戶記錄，涵蓋姓名、化名、代理錢包及基本地址
· 48,536 個含完整元數據的 Gamma 市場記錄
· 超過 25 萬個含 FPMM 地址的活躍 CLOB 市場記錄
Dark Web Informer 的貼文同時列出攻擊者聲稱的技術漏洞，包括 CVE-2025-62718（Axios NO_PROXY 繞過，CVSS 評分 9.9）、CLOB API CORS 配置錯誤（通配符來源加 credentials=true），及多個未經身份驗證的 API 端點。
Polymarket 漏洞賞金計劃背景
根據 Polymarket 官方漏洞賞金計劃頁面，平台設有 500 萬美元的漏洞賞金計劃，透過 Spearbit/Cantina 平台接受漏洞回報，涵蓋智能合約及 Web 應用程式漏洞，嚴重程度分為嚴重、高、中等及低四個等級。根據計劃條款，攻擊公共 API 端點的行為不在賞金資格範圍內。
常見問題
Polymarket 否認資料外洩的聲明於何時發布？核心論點為何？
根據 Polymarket 於 2026 年 4 月 29 日在 X 平台的聲明，平台否認資料外洩，表示所有鏈上數據本為公開可審計，可透過公開 API 免費取用，並指出攻擊公共 API 端點不符合漏洞賞金資格。
Dark Web Informer 聲稱的洩露數據規模及數據提取日期為何？
根據 Dark Web Informer 於 2026 年 4 月 29 日在 X 平台的貼文，攻擊者聲稱於 2026 年 4 月 27 日提取超過 30 萬筆記錄，包括約 1 萬個含完整個人識別資訊（PII）的用戶記錄及超過 25 萬個 CLOB 市場記錄。
Polymarket 的漏洞賞金計劃規模為何？由哪個平台管理？
根據 Polymarket 官方漏洞賞金計劃頁面，計劃規模為 500 萬美元，透過 Spearbit/Cantina 平台接受漏洞回報；攻擊公共 API 端點的行為不在賞金資格範圍內。
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Articoli correlati
Polymarket Denies Data Breach Claim After Hacker Alleges 300K+ Records Compromised
According to Polymarket's official statement, the prediction market platform has denied recent allegations that it suffered a data breach, saying the information being circulated involves public API endpoints and on-chain blockchain data. A hacker using the pseudonym "xorcat" claimed to have
GateNews2h fa
Fed Chair Powell's April 30 Press Conference: Markets Warn of Hawkish Risks Amid Inflation Concerns
According to BlockBeats, multiple major institutions on April 29 previewed Fed Chair Jerome Powell's press conference scheduled for April 30, warning of potential hawkish risks. Most institutions expect the Fed to maintain a cautious stance amid improving labor markets and persistent inflation press
GateNews4h fa
Paris Saint-Germain Champions League Odds Rise to 32%, Up 6% in 24 Hours on Polymarket
According to Odaily Seer's monitoring of Polymarket's UEFA Champions League winner prediction market, Paris Saint-Germain's odds to win rose to 32% on April 29, matching Bayern Munich, with a 24-hour gain of 6%. Bayern Munich's odds fell 5%
GateNews7h fa
Hyperliquid Launches Outcome Tokens for Prediction Markets with Zero Opening Fees
According to CoinDesk, Hyperliquid recently launched outcome tokens for prediction markets, introducing a zero opening fee model to compete with Polymarket and Kalshi. The platform charges fees only on closing or settlement transactions across minting, trading, burning, and settlement scenarios. The
GateNews7h fa
XBIT Ranks Fourth on Polymarket Builder with $36.12M Monthly Trading Volume in One Month
According to official data, on April 29, crypto trading aggregation platform XBIT ranked fourth on the Polymarket Builder leaderboard with approximately $36.12 million in monthly trading volume. Launched in early April, XBIT achieved significant growth within weeks and has passed official Polymarket
GateNews9h fa
Prediction Markets Hit $25.7B Monthly Volume as Retail Users Dominate
Prediction market volume climbed to $25.7 billion in March, a 10.6% jump from February, with most users trading under $10,000, according to a report from Bitget Wallet produced in collaboration with Polymarket. The report tracked 1.29 million wallets in the first quarter and found that retail activi
CryptoFrontier9h fa
