Polymarket has completed its private key rotation and plans to migrate the private keys to a key management service in the future.

On May 23, a representative from prediction market Polymarket stated that the security incident was caused by the leakage of a private key that had been used for six years. This private key was used for internal deposit configuration, and some funds subsequently flowed to related addresses. The team has completed the private key rotation and reclaimed all production environment access. The next step is to migrate all private keys to a Key Management Service (KMS), abandoning the traditional storage method. The platform and UMA contract were not attacked, user funds are safe, and platform operations are unaffected.