New security feature: Withdrawal address allowlisting You can now lock withdrawals from your deposit wallet to addresses you’ve approved. Adding a new address requires email verification and a 48-hour time lock, and you can cancel it from the email if it wasn’t you. That means even if someone gets into your session or you sign a bad transaction, they can’t drain funds or transfer your positions to an address you don’t control. I highly recommend enabling it if you are on the latest wallet version. Turn it on in Settings → Account. Passkey support is coming soon to strengthen security further. For non-deposit wallet users, we are developing a migration tool to help you move everything to the new wallet type. If you don't want to wait, you can open a new account to access this feature immediately. We are also working on adding more advanced built-in security protection, without requiring you to enable anything on your deposit wallet - will also be live soon.

Last night was special. Election days just never get old for us at Polymarket. Watching regular people experience the beauty of market based forecasts as the results come in. How practically useful it is. How simple it is to interpret. When it clicks, it clicks. It’s now routinely hours between when prediction markets call it versus the TV networks. The networks hold out until absolute certainty, and the suspense keeps it entertaining all night. No knock to them, but now there’s Polymarket, and many people are realizing they want to know what's happening in real time. I know the industry has gained a mixed rap for a variety of reasons, many of which are criticisms with real merit. But I think I speak for both myself and my peers when I say we got into this because we really love the idea of markets being able to place a price on the future (e.g. Democrats had a 92% chance to take the House on Polymarket), and how that can help people better understand what's likely to happen and make decisions accordingly. Our mission is to make sure we deliver on the promise of prediction markets, which was on full display last night. In the midst of so much noise around what we do, the American people get to see what Polymarket is really all about. Feels like one step closer to the dream. Onwards.

Today's an exciting day for prediction markets. It's not necessarily about the volume (although I'm tracking), but more about the predictive power. I got into PMs because I'm a believer. I did this shit for free before hired by Poly. This shit is fun. Excited for tonight.

Yesterday, a 3rd-party performance script on polymarket⁠.com was compromised by its vendor's attacker & swapped for one built to target our users. For a small window of time, it used open sessions to sell positions and move funds. The vendor has publicly confirmed the breach..

HOLY SHIT. For crypto, this is one of the most insane posts of the year, but I'm guessing most people don't understand it. Let me explain... Bitcoin's accounts, and subsequently Ethereum's (and therefore every other EVM chain's), are built on a specific elliptic curve called secp256k1. secp256k1 is a different elliptic curve from the one used across nearly every modern hardware device, including iPhones. Modern devices mostly use a different curve called secp256r1, which is usually referred to as P-256 - one of the curves investigated in the article. This mismatch has made it sooo difficult in the past to integrate crypto accounts natively into the security systems of modern hardware. For example, Apple's Secure Enclave natively supports P-256, not secp256k1. This has prevented crypto accounts from being able to use the same hardware protection as things like Apple Pay. Same goes for the web with passkeys - WebAuthn uses P-256 signatures, which means Ethereum accounts using secp256k1 can't use them natively either. But why did Satoshi do this? The main theory for choosing secp256k1 was distrust of the P-256 curve - i.e. he thought there was an NSA backdoor. A "backdoor" here basically means a secret, intentional weakness in the curve that would allow the NSA to exploit it and access private keys. This was because P-256 was created with involvement from the NSA... And the NSA provided a mysterious "seed" used to generate one of the curve's parameters without explaining where that seed came from. This eventually transformed into a ~25-year-old mystery with a 5-figure reward for finding where this seed came from. Claude figured it out in less than 30 mins. And the best part is its internal thinking was: "Hmm wait... is it suspicious that such an obvious thing wasn’t discovered in 25 years?" The solution was stupidly simple - just the time the curve was created, put into a specific random number generator function. This doesn't 100% prove there's no backdoor yet, but it provides strong evidence that this seed wasn't secretly engineered by the NSA. And Claude did this with "just a simple prompt" in under 30 minutes.

Calling all API traders in prediction markets 👋 I’m building out exchange product across both @Polymarket’s DeFi and US platforms, and my goal is to build the best trading APIs in prediction markets. What’s broken, slow, or missing? Latency, rate limits, order types, market data, docs? Replies and DMs are open. I want to hear what we should fix first.

polymarket is now live in coinbase wallet! you can trade crypto, sports, and more without leaving the app we’re also live in metamask, rainbow, gate exchange, jupiter, and hundreds of other apps and wallets lots more to come

We usually don't share timelines, but we want to be as transparent as possible about the new Rust CLOB build-out for Polymarket DeFi. The current CLOB is the system behind most of the issues we see today, so we've got all hands on deck building the new one. - Oct - full order lifecycle working end to end in staging: trading + settlement flow + onchain + indexer + engine notification flow - Nov - mirroring full production traffic to the new exchange cluster and diffing outputs against the current system. MM test access opens in Nov; we'll confirm the exact date by the end of Oct. - Nov - migration cutover plan locked, with 2x full rehearsals before we flip anything If all goes well, we then release it. The migration is designed to require minimal to no work on any MM/developer's side. Request and response interfaces should stay as they are: we may add extra useful fields, one field may be deprecated, and anything we deprecate will have a notice period before go-live.

i asked claude opus 5.5 to pull the latest code and run the app locally the entire task was literally - git pull - npm run dev 3 mins later and bro was installing puppeteer 😭

ct has never been more fun than it is this week coins are up, crypto feels like it’s in a much better place, and ct has a voice again!! this community is the whole point of crypto we are so fucking back

i love that sam, dario, elon etc never actually stop pushing AI forward they’ll write a whole blog about the risks of advancing too fast and saving humanity, then drop a smarter + cheaper model the next day lol incredible race to watch. and i genuinely think advancing AI is how we end up helping humanity the most

Introducing Polymarket Data, a public source for U.S. & International exchange data. Polymarket U.S. hit 1b+ total volume (contracts) for the weekend, consecutive daily ATHs: - Saturday: 510m+ - Sunday: 525m+ We're just getting started.

some users were affected during last week’s CLOB downtime we want to make this right, and goodwill credits are going out today around 3,000 wallets got goodwill credits automatically. if you think you were affected and did not receive a payment, reach out to me at suhail@polymarket.com with your details by friday september 18 and we will personally review more details: