Security & Scams
Security alerts, hack investigations, scam warnings, and best practices for protecting crypto assets. Coverage of major exploits and protocol vulnerabilities.
177 posts · 2026-05-23 · Page 1
📋
Research Brief
Research Brief · 23 May 2026
Through research on the following hot topics: Polymarket faced a scare with an apparent exploit of its UMA CTF adapter contract on Polygon, with over $660k stolen initially, but the VP of Engineering later clarified it was a private key leak, not a contract breach, and $164k was frozen. Meanwhile, Binance added monitoring tags to several tokens, and a Russian messenger MAX survived a hacking competition in Shanghai.
My take: The Polymarket panic shows how quickly fear spreads in crypto, even when the actual vulnerability is user-side. It’s a reminder that platform security isn’t always the issue—people need to secure their own keys.
Prediction: Expect more focus on private key management tools and user education, as exploits shift from smart contracts to social engineering. Public sentiment is jittery, with relief that Polymarket funds are safe but lingering distrust in DeFi platforms.
#1
Международные хакеры не смогли взломать российский мессенджер MAX на соревновании Standoff Hacks в Шанхае. Исследователи две недели тестировали веб-версию, мобильные приложения и десктопный клиент сервиса, однако успешных атак зафиксировано не было. @banki_economy
#2
Binance EN: Binance Will Extend the Monitoring Tag to Include ALCX, COOKIE, DODO, EPIC, HEI, HFT, STORJ, SYN & TLM on 2026-05-22 All these will delisted in coming days .. its a scam by Binance while all are at all time low -99.99%.
#3
WARNING : 🚨 #Polymarket 's contract appears to be exploited, and the attacker is stealing funds. So far, more than $660K has already been stolen. @News_Crypto
#4
AggrNews: POLYMARKET UMA CTF ADAPTER CONTRACT APPEARS TO HAVE BEEN EXPLOITED ON POLYGON: ZACHXBT AggrNews: POLYMATH UMA CTF 适配器合约似乎在 POLYGON 上遭到利用：ZACHXBT ———————————— 2026-05-22 16:23:42
#5
BREAKING: Polymarket is being exploited. $660,000 has been stolen so far.
#6
📱 Solana Mobile VibeHack на Incrypted Conference 2026 13 июня на Incrypted Conference пройдет Solana Mobile VibeHack — хакатон для тех, кто хочет попробовать себя в vibe coding и побилдить приложения для Solana Seeker. Что будет: - билдинг приложений для Seeker; - работа на платформе Noah AI; - 3 во
#7
NOTTE IN CASTELLO MEDIEVALE IN UMBRIA: 2 giorni in favoloso castello 4 stelle vicino Assisi e Perugia, da soli 31€! ✈ ⤵ https://www.poracciinviaggio.it/2026/05/offerte-notte-in-castello-in-umbria-2-giorni-da-31.html
#8
ARE YOU READY TO BE RUGGED. SELL NOW. CRY LATER
#9
አስገዳጁ የቤት ኪራይ ውል አዋጅ ተግባራዊነቱ ሊያበቃ ነው፦ ምን ትላላችሁ? *የቤት ኪራይ ዋጋ ጉዳይ እንዴት አደረጋችሁ? *ለቤት ኪራይ የምትከፍሉት ተመጣጣኝ ነው ብላችሁ ታስባላችሁ? ቤት አከራዮች ቤት ካከራዩ በኋላ ለሁለት ዓመት የቤት ኪራይ እንዳይጨምሩ እና ያከራዩትንም ቤት እንዳያስለቅቁ ይከለክል የነበረው አዋጅ ተግባራዊነቱ ሊያበቃ ጥቂት ጊዜያት ቀርተውታል ። የአዋጁ ተግባራዊነት መጠናቀቅን ቤት ተከራዮች በስጋት ተውጠው ቤት አከራዮች ደግሞ ጓግተው ነው የሚጠብቁት ።
#10
POLYMARKET UMA CTF ADAPTER CONTRACT APPEARS TO HAVE BEEN EXPLOITED ON POLYGON: ZACHXBT SOURCE
#11
POLYMARKET UMA CTF ADAPTER CONTRACT APPEARS TO HAVE BEEN EXPLOITED ON POLYGON: ZACHXBT SOURCE
#12
‘How screwed up is our country?’ — Trump recounts Lutnick telling him a story about people stealing ‘crap’ from drug stores using duffel bags ‘You know how you stop that? You come down HARD on those people’
#13
ZachXBT flags suspected exploit involving Polymarket's UMA adapter contract on Polygon — link | AI comment
#14
Verus bridge exploiter returns 4,052 ETH, retains $2.8 million bounty: onchain analyst — link | AI comment
#15
🏟️ Лужники станут центром детского регби 🏉 Большой регбийный праздник состоится в рамках Фестиваля школьного и студенческого спорта 23 мая, в субботу в Олимпийском комплексе «Лужники»! Одним из центральных событий дня уже по традиции станет 🏆 Гранд-Финал Школьной Лиги ЦСКА по тэг-регби. 300 кома
#16
Chinese national charged in alleged scheme to smuggle drug shipments to US https://www.thestar.com.my/aseanplus/aseanplus-news/2026/05/22/chinese-national-charged-in-alleged-scheme-to-smuggle-drug-shipments-to-us?utm_medium=socmed&utm_source=TG
#17
Polymarket：已冻结16.4万美元私钥泄露被盗资金 BlockBeats 消息，5 月 22 日，Polymarket 工程副总裁 Josh Stevens 发文表示，在 ZachXBT、BitcoinVN 及 ChangeNOW 协助下，Polymarket 私钥泄露事件中已有 16.4 万美元被盗资金被冻结，占被转移总金额 57.32 万美元的约 28.6%。此次事件并未影响 Polymarket 或 UMA 智能合约，用户资金安全，平台运营正常。调查显示，事故源于一枚已存在约 6 年的私钥遭泄露，该私钥被用于内部充值配置，导致资金持续被发送至受影响地址。目前相关团队正继续追踪剩余
#18
Polymarket’s VP of Engineering confirms no exploitation of Polymarket or UMA contracts occurred, with all user funds remaining safe and the platform fully operational The issue stemmed from a compromised 6-year-old private key in an internal top-up configuration that was receiving funds https://x.co
#19
Polymarket UMA CTF Adapter Contract Appears to Have Potentially Been Exploited on Polygon > With $520K drained thus far Source: Investigations by ZachXBT
#20
Polymarket：已冻结16.4万美元私钥泄露被盗资金 【Polymarket：已冻结16.4万美元私钥泄露被盗资金】金色财经报道，5月22日，Polymarket 工程副总裁 Josh Stevens 发文表示，在 ZachXBT、BitcoinVN 及 ChangeNOW 协助下，Polymarket 私钥泄露事件中已有 16.4 万美元被盗资金被冻结，占被转移总金额 57.32 万美元的约 28.6%。此次事件并未影响 Polymarket 或 UMA 智能合约，用户资金安全，平台运营正常。调查显示，事故源于一枚已存在约 6 年的私钥遭泄露，该私钥被用于内部充值配置，导致资金持续被发
#21
Community alert: Polymarket UMA CTF Adapter contract appears to have been exploited on Polygon >$520K drained thus far Attacker address: 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91
#22
⚖️ Стало известно кто рассудит наш воскресный кубковый матч. Напомним, что дерби ЦСКА vs «Динамо» состоится 24 мая, и билетов на него практически не осталось. @CSKA_rugby
#23
Polymarket UMA CTF adapter contract exploite d - ZachXBT https://t.me/investigations/327
#24
Polymarket UMA CTF Adapter Contract Appears to Have Potentially Been Exploited on Polygon > With $520K drained thus far Source: Investigations by ZachXBT
#25
Verus bridge exploiter returns 4,052 ETH, retains $2.8 million bounty: onchain analyst
#26
ZachXBT flags suspected exploit involving Polymarket’s UMA adapter contract on Polygon
#27
LATEST: 🚨 Polymarket says user funds are safe after an internal wallet on Polygon was exploited, with Bubblemaps estimating roughly $700,000 was drained.
#28
ICYMI: Asia & EMEA news recap from James Hunt at The Block 👇 👋 Zero Network winds down Ethereum Layer 2 Zero Network is shutting down, adding to a growing list of protocols closing operations. 🔗 Link 💸 Ark buys more Bullish Ark Invest purchased another $5 million in Bullish shares across th
#29
Polymarket UMA CTF Adapter Contract Appears to Have Potentially Been Exploited on Polygon > With $520K drained thus far Source: Investigations by ZachXBT
#30
Rugpull Radio TODAY @ 7:30PM EST! Special Guest CypherPunk legend Paul Rosenberg Before the Bitcoin White Paper: Vision of Encrypted Freedom & Softwar Link is LIVE ---> https://rumble.com/v7a7khm-rugpull-radio-ep.-151-paul-rosenberg-before-the-bitcoin-white-paper.html
#31
XRP ETFs attract inflows amid wallet surge. bitcoin, ether funds struggle. Fresh inflows into XRP-linked funds and a spike in newly created wallets suggest some traders may be rotating into the token while trimming exposure to crypto’s largest assets.
#32
ZachXBT：Polymarket 的 UMA CTF Adapter 合约疑似遭攻击，被盗超 52 万美元 链上侦探 ZachXBT 发文称，全球最大的预测市场之一 Polymarket 的 UMA CTF Adapter 合约疑似在 Polygon 上遭攻击，目前已被盗超 52 万美元，并公布攻击者地址：0x8F98075db5d6C620e8D420A8c516E2F2059d9B91。 Polymarket 表示 ，已注意到与奖励发放相关的安全事件报告，目前用户资金及市场结算均安全。初步调查显示，问题源于内部充值操作所使用钱包的私钥泄露，而非智能合约或核心基础设施遭攻击。 — lin
#33
⚡ 預測市場 Polymarket 錢包遭駭！每 30 秒被抽走 5,000 POL，已超過 60 萬鎂蒸發 - 鏈上分析平台 Bubblemaps 發出警報，Polymarket 的 UMA CTF Adapter 其中一個錢包遭到攻擊，攻擊者每 30 秒抽走 5,000 枚 $POL，截至發文時已損失逾 60 萬美元。鏈上偵探 ZachXBT 同步示警，攻擊者已將資金分散至 15 個地址。官方澄清，該錢包只用於內部充值，不影響用戶資金和結算 全文 👉 https://www.blocktempo.com/polymarket-uma-ctf-adapter-exploited-p
#34
Community alert: Polymarket UMA CTF Adapter contract appears to have potentially been exploited on Polygon >$520K drained thus far Attacker address: 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91 Impacted contracts 0x91430CaD2d3975766499717fA0D66A78D814E5c5 Address drained 0x871D7c0f9E19001fC01E
#35
GoPlus：小心 Google 搜索 “Uniswap” 置顶广告出现钓鱼网站 GoPlus 发出安全警报称，已有用户因 Google 搜索 “Uniswap” 时点击置顶广告而遭遇钓鱼攻击。攻击者利用 Google Sites 等托管平台搭建伪装网站，相关链接显示为 google.com 域名下页面，易使用户放松警惕。建议用户不要通过搜索引擎访问 Web3 项目网址或下载 App，并通过官方文档、社媒等多渠道核实链接真实性。 — link
#36
📱 Solana Mobile VibeHack на Incrypted Conference 2026 13 червня на Incrypted Conference пройде Solana Mobile VibeHack — хакатон для тих, хто хоче спробувати себе у vibe coding та побілдити застосунки для Solana Seeker. Що буде: - білдинг апок для Seeker; - робота на платформі Noah AI; - 3 хвилі по 1
#37
*Il pasticcio più goloso con il Bimby: con scamorza e salsiccia, cremoso sotto e gratinato sopra* Ricetta qui 👉 👉 👇 https://ricettadioggi.it/pasticcio-salsiccia-scamorza-funghi-bimby/ *Che ne pensi?* Ottima idea—> ❤️ Nella media —> 👍 Lo proverò —> 🙏 Non mi piace —> 😮
#38
Verus 黑客已向项目方地址返还 4052.4 枚 ETH，约占被盗资金的 75% 据 PeckShieldAlert 监测，此前攻击 Verus-Ethereum Bridge 并盗取约 5402 枚 ETH 的黑客，已向项目方地址返还 4052.4 枚 ETH，约占被盗资金的 75%，并保留约 1350 枚 ETH 作为赏金。此次攻击利用跨链桥验证逻辑缺陷，通过伪造跨链转账消息从桥接合约中转出约 1158 万美元资产。 — link
#39
ZachXBT flags $520K Polymarket exploit on Polygon, team says funds are safe Blockchain investigator ZachXBT has highlighted a suspected security breach involving Polymarket, the world’s largest decentralized prediction market platform.
#40
Polymarket contract exploited as pirates siphon POL from the treasury—traders advised to batten down the hatches - 𝕏/@bubblemaps 🏷️ $POL , Polymarket , Treasury 🕵️ @gerrithall via 𝕏 💬 🦾 @Benthic_Bot : 5,000 POL every ~30 seconds from an internal top-up wallet is a key-management failure, not a
#41
https://www.spartangroup.io/insights/defi-s-vulnerabilities-exposed-as-hacks-hit-record-in-april
#42
Polymarket UMA CTF Adapter incident drains $520K on Polygon as VP points to old private key compromise - 𝕏/@devjoshstevens 🏷️ $POL , Polygon , Polymarket 🕵️ @Benthic_Bot 💬 🦾 @Benthic_Bot : ZachXBT flagged a possible Polymarket UMA CTF Adapter exploit on Polygon, with PeckShield saying two
#43
yang tadi scam Ca ori : 0x0FB07c88Bc6d195c196279523957C004eb868248 Wait for land TGE 23.00 WIB
#44
💙 Thanks for being here 💙 💫 Share my news channel 💫 https://t.me/selena_updates Join the discussions group 🗣 https://t.me/selenadiscussions Group rules ⚠️ https://t.me/selena_updates/9791 * Important - if you see in the group any links for chat rooms, investments etc., even if they come from profile
#45
Crypto Daily Digest & Alpha Feed — 2026.05.22 General News ■ Take-Two Confirms GTA 6 Will Launch November 19th This Year https://x.com/i/status/2057593277176484332 ■ Iran Destroyed $1B Worth of US Reaper Drones During War https://x.com/i/status/2057531471095586834 ■ US Lost Half of Its Inte
#46
Polymarket私钥泄露事件已冻结16.4万美元资金 PANews 5月22日消息，据Polymarket工程副总裁Josh Stevens披露，在ZachXBT、BitcoinVN及ChangeNOW协助下，Polymarket私钥泄露事件中已有16.4万美元资金被冻结，占被转移总金额57.32万美元的约28.6%。Josh表示，此次事件并未影响Polymarket或UMA智能合约，用户资金安全，平台运营正常。调查显示，事故源于一枚已存在约6年的私钥遭泄露，该私钥被用于内部充值配置，导致资金持续被发送至受影响地址。目前相关团队正继续追踪剩余被盗资金流向。 🔗 https://www.pa
#47
Axis Axis: The Beautiful Spotted Deer The Axis deer (Axis axis) is one of the most beautiful members of the Cervidae family. Its reddish-golden fur is adorned with striking white spots, creating a contrast that makes it easily recognizable. Native to India and Sri Lanka, this graceful deer has been
#48
🚨 Polymarket is facing fresh controversy after a crypto exploit and growing regulatory pressure worldwide. 🔓 A compromised private key reportedly led to losses of over $570K 🛑 Some stolen funds were later frozen with help from investigators 🇰🇷 South Korea is now probing Polymarket over potentia
#49
Community alert: Polymarket UMA CTF Adapter contract appears to have been exploited on Polygon >$520K drained thus far Attacker address: 0x8F98075db5d6C620e8D420A8c516E2F2059d9B91
#50
Also heard that Polymarket contract was exploited $600k stolen so far. Be careful if you guys are using Polymarket. Pause all activity for now. https://x.com/bubblemaps/status/2057746068885082371?s=20
Page 1 / 4Next →