Traders Drain Millions: The Five-Second Trick
The exploit worked by briefly manipulating the spot price used to settle contracts, triggering automated payouts before the price snapped back.
A structural flaw in Polymarket's price oracle allowed traders to execute artificial price pushes lasting just five seconds — long enough to drain millions of dollars from the prediction market before any circuit breaker could respond, according to reporting by CoinDesk.
The exploit worked by briefly manipulating the spot price used to settle contracts, triggering automated payouts before the price snapped back. Onchain analysts had flagged the vulnerability publicly for months. Polymarket did not move to fix it until the losses became impossible to ignore.
The platform is now shifting to time-weighted average prices, a standard safeguard in decentralised finance that makes short-duration manipulation prohibitively expensive. The change means a five-second price spike no longer determines a contract's outcome — but it also means the window for easy arbitrage, legitimate or otherwise, has closed.
What the episode exposes is not a rogue actor but a design choice that was left standing long after its consequences were documented. Prediction markets occupy a regulatory grey zone: too financial to be games, too novel for most frameworks to reach. The Clarity Act, currently stalled in the US Congress, was supposed to bring structure to the sector — but per OKX executive Rafique, Democrats have limited appetite to hand Republicans a crypto win before the midterms.
In the meantime, the losses are real and the winners have already moved on.