Josh

New security feature: Withdrawal address allowlisting

You can now lock withdrawals from your deposit wallet to addresses you’ve approved. Adding a new address requires email verification and a 48-hour time lock, and you can cancel it from the email if it wasn’t you. That means even if someone gets into your session or you sign a bad transaction, they can’t drain funds or transfer your positions to an address you don’t control. I highly recommend enabling it if you are on the latest wallet version.

Turn it on in Settings → Account. Passkey support is coming soon to strengthen security further.

For non-deposit wallet users, we are developing a migration tool to help you move everything to the new wallet type. If you don't want to wait, you can open a new account to access this feature immediately.

We are also working on adding more advanced built-in security protection, without requiring you to enable anything on your deposit wallet - will also be live soon.

Yesterday, a 3rd-party performance script on polymarket⁠.com was compromised by its vendor's attacker & swapped for one built to target our users. For a small window of time, it used open sessions to sell positions and move funds. The vendor has publicly confirmed the breach..

Esports markets on Polymarket are now 5.5x faster. Esports volume has been growing like crazy, and traders deserve the fastest experience we can build

We rebuilt the protocol from scratch, with new smart contracts designed for the next generation of prediction markets. Full write-up below 👇

We made placing orders much faster on the Polymarket UI.