PANews reported on May 23 that a representative from prediction market Polymarket stated that the security incident was caused by the leakage of a private key that had been used for six years. This private key was used for internal deposit configuration, and some funds subsequently flowed to related addresses.

The team has completed the private key rotation and reclaimed all production environment access. The next step is to migrate all private keys to a Key Management Service (KMS), abandoning the traditional storage method. The platform and UMA contract were not attacked, user funds are safe, and platform operations are unaffected.