Polymarket says a vendor breach exposed user funds, while Binance says attackers moved $6.3 billion across 10 blockchains

Two crypto platforms reported major incidents overnight: Polymarket said a supplier was compromised and that some users’ funds were exposed, while Binance said attackers moved about $6.3 billion across 10 blockchains. Binance said it managed to freeze about $3 billion in assets, which is the part payments and risk teams will care about first: what was moved, what was contained, and what still sits in the flow.

1. Polymarket said the breach came through one of its vendors, which gave attackers access to funds belonging to part of its user base. The platform said it will fully compensate affected users.
2. Binance said the attackers withdrew $6.3 billion across 10 different blockchains. According to the platform, about $3 billion was frozen through rapid response measures.
3. Across the two platforms, the total damage was said to exceed $6 billion. For PSPs and crypto payment partners, that is not just a headline number; it is the sort of incident that turns vendor access, wallet controls, and incident response timing into board-level questions.
4. In the same wave of panic, reports circulated about alleged breaches at Bybit, Bitget, and Swiftx. All three platforms publicly denied the claims on their X accounts.

The practical takeaway is simple: during a major security event, fake breach claims tend to spread almost as fast as the real ones. For high-risk operators, that means source verification is part of the incident response playbook, not a nice-to-have.