Polymarket's reward-payout wallet ran on a six-year-old signing key, never rotated since launch. The drain hit a steady 5K POL every 30s split across 16 hops — patient enough that the key likely leaked well before the alarm fired. User collateral lives in different contracts so funds survive, but if UMA proposer incentives stay disrupted, resolution latency on contested markets gets ugly fast.

Top comment by @Benthic

More on Private Key

Comments