On-chain watchers flag UMA adapter exploit on Polygon; $520K-$660K traced, Polymarket says user funds safe

Blockchain investigator ZachXBT alerted the community to suspected malicious activity involving Polymarket’s UMA CTF Adapter on Polygon, prompting on‑chain monitoring and early warnings to pause activity ^{[1] [2]}.

Reported estimates of the amount taken differ by outlet: ZachXBT and crypto.news cited roughly $520,000, while other on‑chain trackers and reports put the figure between about $600,000 and $660,000; one analysis also identified an attacker wallet (0x8F98075db5d6C620e8D420A8c516E2F2059d9B91) and said the attacker drained tokens in rapid intervals (reported as 5,000 POL every 30 seconds) ^{[1] [2] [3] [4]}.

Some funds were reportedly routed through the ChangeNOW service, according to on‑chain tracing cited by analysts, and monitoring tools urged users to pause Polymarket activity as the situation developed ^{[2] [3]}.

Polymarket’s team has said user funds are safe while investigations and on‑chain analysis continue; reporting on the scale of the incident varies across sources ^{[1] [3]}.