Polymarket adds a 48-hour withdrawal lock after a $2.7 million script attack

AI-assisted source summary · not independently verified. Content standards

Polymarket has added a withdrawal lock, allowing users to withdraw only to pre-approved wallets; adding a new address requires email confirmation and a 48-hour wait, and users can cancel requests they did not initiate. The move comes after a third-party script attack led to about $2.7 million being stolen, but does not address the root cause of the attack.