The five second trick that drained millions from Polymarket

cryptonews14:41

Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2658988067?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-08-10 14:41","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2658988067","market":"us","top_or_hot":-1,"title":"The five second trick that drained millions from Polymarket","media":"cryptonews","content":"<div>\n<p>Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant ...</p>\n\n<a href=\"https://crypto.news/polymarket-five-second-exploit-manipulation-twap-fix/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>The five second trick that drained millions from Polymarket</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nThe five second trick that drained millions from Polymarket\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-10 14:41 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/polymarket-five-second-exploit-manipulation-twap-fix/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant ...</p>\n\n<a href=\"https://crypto.news/polymarket-five-second-exploit-manipulation-twap-fix/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"NCIQ","symbol_name":"HASHDEX NASDAQ CRYPTO INDEX US ETF","start_time":0,"source_url":"https://crypto.news/polymarket-five-second-exploit-manipulation-twap-fix/","article_id":"2658988067","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/polymarket-five-second-exploit-manipulation-twap-fix/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2658988067","pubTimestamp":1786344092,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant snapshots with time weighted averages, but the structural vulnerability they exposed is not unique to one platform.Polymarket replaced its instant price snapshot settlement mechanism with time weighted average prices on August 7, 2026, after a study identified 821 accounts that collectively made $8.2 million in settlement windows classified as likely manipulated across roughly two months of five minute bitcoin contracts.The manipulation worked by accumulating a large position on Polymarket, then placing unusually large orders on Binance in the final seconds before settlement to move the bitcoin price across the contract’s strike threshold, causing the contract to resolve in the manipulator’s favor before the price reverted.The finding raises questions that extend well beyond one platform. Predi","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"NCIQ":"HASHDEX NASDAQ CRYPTO INDEX US ETF","NGHT":"Nicholas Bitcoin and Treasuries AfterDark ETF","MNRS":"GRAYSCALE BITCOIN MINERS ETF","HECO":"SPDR Galaxy Hedged Digital Asset Ecosystem ETF","FBTC":"比特币ETF-Fidelity","LFGY":"YieldMax Crypto Industry and Tech Portfolio Option Income ETF","MAXI":"比特币期货ETF-Simplify","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","BTCO":"比特币ETF-Invesco Galaxy","BITU":"2倍做多比特币期货ETF-Proshares","BKCH":"AdvisorShares Sabretooth ETF","BTRN":"比特币期货ETF-Global X","GBTC":"比特币ETF-Grayscale","BITW":"Bitwise 10 Crypto Index ETF","ARKB":"比特币ETF-21Shares","SBIT":"2倍做空比特币期货ETF-Proshares","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","BITQ":"Bitwise Crypto Industry Innovators ETF","BITX":"2倍比特币期货ETF-Volatility Shares","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","ARKY":"ARK 21SHARES ACTIVE BITCOIN ETHEREUM STRATEGY ETF","DAPP":"VanEck Digital Transformation ETF","GDLC":"Grayscale CoinDesk Crypto 5 ETF","TXXH":"21Shares 2x Long HYPE ETF","MSBT":"Morgan Stanley Bitcoin Trust ETP","IBIT":"比特币ETF-iShares","WGMI":"比特币矿商ETF-CoinShares","BTC":"Grayscale Bitcoin Mini Trust","BITB":"比特币ETF-Bitwise","YBIT":"YieldMax Bitcoin Option Income ETF","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","BTCI":"NEOS Bitcoin High Income ETF","BITC":"Bitwise Trendwise Bitcoin and Treasuries Rotation Strategy ETF","BETE":"等权重比特币&以太币期货ETF-ProShares","BTF":"比特币&以太币期货ETF-CoinShares","HODL":"比特币ETF-VanEck","STCE":"Schwab Crypto Thematic ETF","BITI":"1倍做空比特币期货ETF-Proshares","BETH":"比特币&以太币期货ETF-ProShares","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","BTFX":"比特币期货ETF-CoinShares","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","BITO":"比特币期货ETF-ProShares","YBTC":"比特币看涨期权ETF-Roundhill","BTGD":"STKD Bitcoin & Gold ETF","BEGS":"RAREVIEW 2X BULL CRYPTOCURRENCY & PRECIOUS METALS ETF","BRRR":"比特币ETF-CoinShares"},"translate_title":"让 Polymarket 损失数百万美元的第二个技巧","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"GDLC":0.9,"BTCI":0.9,"IBIT":0.6,"NCIQ":0.9,"BTCZ":0.9,"GBTC":0.9,"TXXH":0.9,"BKCH":0.9,"XBTY":0.6,"BRRR":0.9,"SBIT":0.9,"ARKY":0.9,"YBTC":0.9,"STCE":0.9,"BTCL":0.9,"BTRN":0.9,"BTF":0.9,"BTGD":0.9,"CBTJ":0.9,"LFGY":0.9,"BITX":0.9,"CBOA":0.6,"CRPT":0.9,"NGHT":0.9,"HODL":0.9,"BEGS":0.9,"BITC":0.9,"BITQ":0.9,"BITW":0.9,"MNRS":0.9,"BITI":0.9,"MSBT":0.9,"HECO":0.9,"YBIT":0.9,"WGMI":0.9,"BITB":0.9,"BTCO":0.9,"BETE":0.9,"ARKB":0.9,"MBTmain":0.9,"MAXI":0.9,"BETH":0.9,"DAPP":0.9,"BTFX":0.9,"BTC":0.6,"BITU":0.9,"FBTC":0.9,"BITO":0.6},"content_text":"Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant snapshots with time weighted averages, but the structural vulnerability they exposed is not unique to one platform.\n\n\nSummary\n\n\n\nPolymarket replaced its instant price snapshot settlement mechanism with time weighted average prices on August 7, 2026, after a study identified 821 accounts that collectively made $8.2 million in settlement windows classified as likely manipulated across roughly two months of five minute bitcoin contracts.\nThe manipulation worked by accumulating a large position on Polymarket, then placing unusually large orders on Binance in the final seconds before settlement to move the bitcoin price across the contract’s strike threshold, causing the contract to resolve in the manipulator’s favor before the price reverted.\nExcluding market makers, 93 percent of the losses in windows classified as manipulated fell on retail traders, and the researchers found that a bet the market treated as near certain was overturned one time in three during manipulated windows.\nUnder the new system, five minute markets will use a 30 second average and 15 minute and four hour markets will use a 60 second average, with price data delivered through Chainlink Data Streams, and Polymarket committed $1 million in liquidity rewards across affected markets through August to cushion the transition.\nRival platform Kalshi already uses a regulated CF Benchmarks price index with a 60 second moving average and reported conducting 150 to 250 material investigations per quarter with 40 to 50 CFTC referrals so far in 2026, highlighting the surveillance gap between DeFi native and regulated prediction market venues.\n\n\n\nOn August 7, 2026, Polymarket announced it would replace the single price snapshot it had used to settle short dated crypto contracts with a time weighted average price, known as a TWAP. The change followed months of trader complaints, public warnings from onchain analysts, and a peer reviewed study from researchers at Stanford University and Singapore Management University that documented how a small number of accounts systematically profited by moving bitcoin prices on Binance in the final seconds before Polymarket’s settlement windows closed.\nThe exploit was not a hack. No smart contract was compromised. No private key was stolen. The vulnerability was a design choice: Polymarket settled its short dated crypto markets using a single price at a single moment. Anyone who could move that price for a few seconds could change the outcome of the contract. The researchers called the vulnerability “structural,” and their language was precise. “An asset price contract settles on a financial price,” they wrote, “and that price can be moved by trading the underlying market itself.”\nThe finding raises questions that extend well beyond one platform. Prediction markets handled $50.6 billion in volume in July 2026 alone. As these markets grow, the intersection between prediction contract settlement and spot market manipulation becomes a systemic concern, not a niche complaint from retail traders who lost money on five minute bets.\nThe timing of the fix also coincides with Polymarket’s reported effort to raise $1 billion at a $20 billion valuation. For a platform seeking institutional capital, the public documentation of a manipulation vulnerability that went unaddressed for months creates a due diligence problem. Institutional investors do not merely evaluate growth metrics. They evaluate integrity infrastructure. The TWAP transition can be read as both a genuine security improvement and a necessary precondition for closing a fundraising round with investors who take market structure risk seriously.\nHow the manipulation worked\nThe mechanics were straightforward. A trader would accumulate a position on Polymarket’s five minute bitcoin up or down contract. These contracts pay out based on whether bitcoin’s price is above or below a specific threshold at the moment of settlement. The trader would then wait until the final seconds before settlement and place a large order on Binance, the world’s largest spot exchange by volume, to push bitcoin’s price across the strike threshold.\nThe order did not need to be large enough to sustain a price move. It only needed to last long enough for the settlement snapshot. Once the contract resolved, the manipulator would close the Binance position, often at a small loss, and collect the Polymarket payout. The Binance loss was the cost of doing business. The Polymarket profit was the payoff.\nThe strategy worked because five minute contracts have thin time horizons. Moving bitcoin’s price by a fraction of a percent for five seconds is expensive but achievable for a well capitalized trader with access to Binance’s spot order book. The study found that the manipulation was concentrated in the final seconds, with unusually large orders appearing just before settlement and rapid price reversals immediately after.\nThe cost structure made the trade attractive. A trader might lose $5,000 to $20,000 pushing bitcoin’s price on Binance, but collect $50,000 or more from the Polymarket payout. The spot market loss was predictable and bounded. The prediction market gain depended only on whether the price crossed the threshold at the exact moment of settlement. As long as the Polymarket position was large enough relative to the Binance cost, the combined trade was profitable regardless of where bitcoin’s price ended up minutes later.\nThe researchers noted that the manipulators showed increasing sophistication over the study period. Early instances involved crude large orders that were visible in the order book for several seconds. Later instances used more fragmented order placement, splitting the price push across multiple smaller orders that arrived in rapid succession during the final two to three seconds. This fragmentation made the activity harder to detect in real time, though the statistical signature in the settlement data remained clear.\nThe paper did not prove that the Binance orders and the Polymarket positions were placed by the same individuals. It could not, because Polymarket operates as a DeFi native platform where traders use pseudonymous wallets. But the statistical patterns were consistent with coordinated activity, and the timing correlations were tight enough for the researchers to classify specific settlement windows as “likely manipulated.”\nWhat the research actually found\nThe study, published on arXiv by researchers from Stanford and Singapore Management University, analyzed roughly two months of five minute bitcoin contracts on Polymarket. The researchers identified 821 accounts whose trading activity was concentrated in windows where the statistical signatures of manipulation were present.\nThose accounts collectively made $8.2 million during the study period. The losses came almost entirely from retail traders. After excluding market makers, who are structurally neutral and profit from spreads rather than directional bets, the researchers found that 93 percent of the losses in likely manipulated windows were borne by retail participants.\nOne finding stood out. In manipulated windows, “a bet the market treated as near certain was overturned one time in three.” This means that contracts priced at 90 percent or higher probability of resolving one way were flipped by last second price movements. For retail traders relying on market pricing as a signal of likelihood, this created a situation where the odds they saw on screen bore little relationship to the odds they actually faced.\nThe scale of the losses was asymmetric. A retail trader placing a $100 bet on a five minute bitcoin contract that was priced at 90 percent certainty expected to win $10 in profit nine times out of ten. When manipulation flipped the outcome, that trader lost $100. Across hundreds of settlement windows and thousands of participants, these small individual losses aggregated into the $8.2 million figure the researchers documented. No single retail trader lost a fortune. The damage was distributed across a large number of small participants, each of whom had no way to know that the odds they saw on screen had been distorted.\nThe researchers described the vulnerability as inherent to any event contract that settles on a real time financial price. The specific platform, the specific asset, and the specific contract duration all affect how easy the manipulation is. But the underlying dynamic, that the settlement price can be influenced by trading the referenced asset, applies to any platform using instant price snapshots.\nThe manipulators exploited a timing asymmetry that exists whenever a financial contract settles on a single price observation. In traditional futures markets, settlement prices are typically calculated from a volume weighted average of trades over a defined window, precisely to prevent the kind of end of period manipulation that Polymarket experienced. The fact that Polymarket launched with a single snapshot mechanism suggests either that the platform’s designers did not anticipate this attack vector or that they accepted the risk as a tradeoff for simpler oracle design. Either way, the result was a settlement system that rewarded traders who could move prices by small amounts for brief periods, a capability that requires modest capital relative to the profits available from correctly positioned prediction market contracts.\n\nhttps://x.com/cryptodotnews/status/2086143401398084035\n\nWhy it took months to fix\nThe capital efficiency of the attack is what made it particularly difficult to detect through conventional surveillance. Each individual trade was small enough to look like normal market activity. The manipulators did not need to sustain the price movement for more than a few seconds, and the prediction market positions they held to profit from the manipulation were on a separate platform from the spot exchange where they moved prices. This cross platform structure meant that no single exchange could see both sides of the trade. Binance saw small orders that briefly moved bitcoin’s price. Polymarket saw contracts settling at prices that happened to favor certain accounts. Only by correlating the timing of trades across both platforms could the researchers identify the pattern, and that correlation required access to data from both systems and the statistical tools to analyze it. The attack surface existed not in any single platform’s code but in the gap between two platforms that each operated correctly in isolation but whose interaction created an exploitable seam.\nPolymarket knew about the problem before the study was published. Onchain analysts raised concerns publicly as early as May 2026. Variance Lover, a pseudonymous analyst, posted an extensive breakdown on May 21 documenting the manipulation mechanism and identifying specific settlement windows where the patterns were visible.\n“By now, most people are aware that market manipulation has become a major problem on Polymarket’s five minute crypto markets,” Variance Lover wrote. “The mechanism is simple: accumulate a large position on Polymarket, then move the price on Binance during the settlement window to force the market to resolve in your favor.”\nA contributor who goes by the handle Christine on X noted on May 11 that the manipulation was becoming more severe, citing “precise reversals in the last few seconds.” Josh Stevens, a Polymarket developer, responded publicly: “We are looking into this a bit deeper. Do not worry.”\nThe gap between acknowledgment and action spanned nearly three months. During that time, the manipulation continued. The delay is notable because the fix Polymarket ultimately deployed, replacing a snapshot with a TWAP, is not a novel solution. Time weighted averages have been standard in DeFi oracle design for years. Uniswap V2 introduced TWAP oracles in 2020 specifically to prevent single block price manipulation. The concept was available off the shelf.\nPolymarket has not publicly explained why the fix took as long as it did. One possibility is that switching the settlement mechanism required changes to the smart contracts that resolve bets, which need auditing and testing. Another is that the platform was reluctant to change rules midstream for live markets with open positions. A third, less charitable interpretation is that the manipulation generated volume and fees that the platform was not in a hurry to curtail.\nThe delay had real costs. Variance Lover estimated that manipulation continued throughout June and into July, with increasingly aggressive activity as manipulators learned they could operate without consequences. Several retail traders posted screenshots showing positions that should have been winners based on prevailing market prices but resolved as losers because of last second price spikes. The trust damage was compounding. Each manipulated settlement that went unaddressed made the next complaint louder and the platform’s credibility thinner.\n\nhttps://x.com/cryptodotnews/status/2077861580423979199\n\nHow Polymarket’s fix compares to Kalshi\nThe fix Polymarket deployed mirrors safeguards that Kalshi, its regulated rival, already had in place. Kalshi resolves its short dated crypto markets using a CF Benchmarks price index, which aggregates prices from multiple regulated exchanges. It then applies a 60 second moving average, making it significantly harder to move the settlement price with a brief burst of trading on a single venue.\nKalshi also operates under CFTC oversight, which gives it enforcement tools that Polymarket lacks. A Kalshi spokesperson told CoinDesk that the platform has conducted 150 to 250 material investigations per quarter and made 40 to 50 referrals to the CFTC so far in 2026. Those figures cover all Kalshi markets, not just short dated crypto contracts, but they illustrate the surveillance infrastructure that comes with operating within a regulatory framework.\nThe structural difference between the two platforms matters. Kalshi requires identity verification for all traders. Polymarket’s DeFi version does not. When manipulation is detected on Kalshi, the platform can identify the trader, freeze the account, and refer the case to a regulator. When manipulation is detected on Polymarket, the platform can identify a wallet address but cannot easily connect it to a person.\nPolymarket does operate a US regulated version under CFTC oversight, but its integrity and surveillance infrastructure has been developed largely in response to external pressure rather than as a foundational design choice. The company is reportedly seeking a $1 billion raise at a $20 billion valuation, and the manipulation episode highlights the tension between growing rapidly as a DeFi protocol and building the compliance infrastructure that institutional capital typically requires.\n\nhttps://x.com/cryptodotnews/status/1940993790002515976\n\nWhat the exploit reveals about prediction market design\nThe comparison between Polymarket and Kalshi illuminates a broader tension in prediction market design between decentralization and market integrity. Kalshi operates as a CFTC regulated exchange with centralized order matching, surveillance systems, and the ability to cancel trades that result from manipulation. Polymarket operates on Polygon with smart contract settlement that is transparent but largely automated. The transparency means that manipulation is visible to anyone who examines the blockchain, which is how the Stanford researchers identified the 821 accounts. But visibility is not the same as prevention. A centralized exchange can intervene in real time when it detects suspicious activity. A decentralized protocol must design its settlement rules to be manipulation resistant from the start, because retroactive intervention contradicts the trustless execution model that gives blockchain based markets their appeal.\nThe Polymarket manipulation exposed a broader design tension in prediction markets that settle on financial prices. These markets sit at the intersection of two trading systems: the prediction platform where bets are placed and the spot market where the referenced price is determined. When the two systems are connected but not coordinated, the cheaper market becomes a tool for profiting from the more expensive one.\nIn this case, moving bitcoin’s price on Binance for a few seconds cost less than the Polymarket payout it generated. The arbitrage was negative in the spot market and positive in the prediction market, creating a combined trade that was profitable as long as the settlement mechanism allowed it.\nThis is not a problem unique to Polymarket or even to prediction markets. It is a variant of the same cross venue manipulation that regulators have spent decades combating in traditional finance. The SEC’s Regulation SHO, the CFTC’s anti manipulation rules, and the EU’s Market Abuse Regulation all address scenarios where trading in one market is used to influence outcomes in another. The difference is that those frameworks assume centralized, identity verified markets with shared surveillance feeds. The prediction market version plays out across pseudonymous DeFi platforms and centralized exchanges in different jurisdictions.\nThe TWAP fix addresses the most obvious attack vector by making brief price spikes less effective. But it does not eliminate the underlying vulnerability. A well capitalized manipulator who can sustain a price move for 30 or 60 seconds rather than five can still influence settlement under a TWAP system. The cost is higher, but the attack is not impossible. The question is whether the increased cost makes the manipulation unprofitable, and that depends on the depth of the liquidity in the referenced market and the size of the positions available on the prediction platform.\nThe economics of the manipulation also raise questions about market depth. The reason five second price pushes were possible on Binance is that bitcoin’s order book, despite being the deepest in crypto, still has moments of relative thinness. During periods of lower activity, particularly around the clock during Asian or European off hours, the cost of moving bitcoin’s price by a fraction of a percent drops significantly. The manipulators timed their activity to coincide with these low liquidity windows, compounding the settlement vulnerability with a liquidity vulnerability. A TWAP reduces one problem but does not address the other.\nAs regulatory frameworks for prediction markets continue to develop, the settlement mechanism question will become more prominent. Platforms that want to offer contracts on financial prices will need to either use regulated price feeds, implement robust TWAP mechanisms, or accept that their markets will remain vulnerable to the same class of manipulation that Polymarket just addressed.\nWhat to watch\nManipulation patterns after the TWAP transition. The 30 second and 60 second TWAP windows raise the cost of manipulation but do not eliminate it. Watch for evidence of sustained price pushes that last longer than the averaging window, which would indicate that manipulators are adapting to the new settlement rules.\nPolymarket volume changes on short dated crypto markets. If volume declines significantly after the transition, it may indicate that a portion of the trading activity was driven by manipulators rather than genuine prediction market demand. A volume drop would validate the concern that the platform’s growth was partly artificial.\nRegulatory response from the CFTC. The study provides a public, peer reviewed record of manipulation on a platform that overlaps with CFTC jurisdiction. Watch for formal inquiries, enforcement actions, or rulemaking proposals that address cross venue manipulation between prediction markets and spot exchanges.\nChainlink Data Streams performance. The TWAP mechanism depends on Chainlink for price data delivery. Any latency issues, outages, or oracle manipulation attempts would expose a new attack surface. The reliability of the data feed is now a critical dependency for Polymarket’s market integrity.\nKalshi and Polymarket competition for institutional capital. The manipulation episode and subsequent fix narrow the structural gap between the two platforms. Watch for whether Polymarket’s $1 billion fundraising effort is affected by the integrity concerns or whether the fix is treated as sufficient by prospective investors.\nCopycat manipulation on other DeFi prediction platforms. The settlement vulnerability that Polymarket’s TWAP fix addresses exists on any platform that uses instant price snapshots. Smaller prediction market protocols with less liquidity and less sophisticated monitoring are potentially even more vulnerable. Watch for reports of similar manipulation patterns on competing platforms that have not yet adopted TWAP settlement.\nAcademic follow up research on TWAP effectiveness. The Stanford and Singapore Management University researchers documented the pre-fix manipulation in detail. A follow up study measuring whether manipulation persists or adapts under the TWAP regime would provide the first empirical test of whether the fix works in practice, not just in theory. The research community’s engagement with this question will shape regulatory confidence in TWAP as a sufficient safeguard.\n\n\n\n\n\n                Read more:\n            \n\n                One Polymarket, two exchanges: which one are you on?            \n\nFrequently asked questions\n\n\n\nu003cstrongu003eWhat happened on Polymarket with the five second exploit?u003c/strongu003e\n\nu003cpu003eTraders accumulated positions on Polymarket’s five minute bitcoin contracts and then placed large orders on Binance in the final seconds before settlement to move bitcoin’s price across the contract’s strike threshold. The contract would resolve in the manipulator’s favor, and the price would revert immediately after settlement. Researchers identified 821 accounts that made $8.2 million using this pattern.u003c/pu003e\n\n\n\nu003cstrongu003eHow did researchers discover the manipulation?u003c/strongu003e\n\nu003cpu003eResearchers from Stanford University and Singapore Management University analyzed roughly two months of five minute bitcoin contracts on Polymarket. They found statistically significant correlations between unusually large Binance orders in the seconds before settlement and rapid price reversals after settlement. The study was published on arXiv.u003c/pu003e\n\n\n\nu003cstrongu003eWho lost money from the Polymarket exploit?u003c/strongu003e\n\nu003cpu003eExcluding market makers, 93 percent of the losses in settlement windows classified as likely manipulated fell on retail traders. These were users who placed bets on five minute bitcoin contracts and lost when last second price movements changed the contract outcome.u003c/pu003e\n\n\n\nu003cstrongu003eWhat is a TWAP and how does it prevent manipulation?u003c/strongu003e\n\nu003cpu003eA time weighted average price, or TWAP, averages the price over a window of time rather than using a single instant snapshot. Polymarket now uses a 30 second average for five minute markets and a 60 second average for 15 minute and four hour markets. This makes it more expensive to manipulate settlement because the attacker must sustain the price distortion for the entire averaging window rather than just a single moment.u003c/pu003e\n\n\n\nu003cstrongu003eDoes Kalshi have the same problem?u003c/strongu003e\n\nu003cpu003eKalshi uses a regulated CF Benchmarks price index with a 60 second moving average and requires identity verification for all traders. A Kalshi spokesperson told CoinDesk that these safeguards make brief price manipulation u0022significantly harder and more expensive.u0022 However, a Kalshi user disputed this, claiming to have witnessed similar issues on the platform.u003c/pu003e\n\n\n\nu003cstrongu003eIs the TWAP fix enough to prevent future manipulation?u003c/strongu003e\n\nu003cpu003eThe TWAP raises the cost of manipulation but does not eliminate the underlying vulnerability. A well capitalized trader who can sustain a price movement for the full averaging window can still influence settlement. The fix is a significant improvement over instant snapshots but not a complete solution.u003c/pu003e\n\n\n\nu003cstrongu003eWhy did Polymarket take three months to fix the problem?u003c/strongu003e\n\nu003cpu003ePolymarket has not publicly explained the delay. Possible factors include the need to audit and test smart contract changes, reluctance to change rules on live markets with open positions, and the complexity of integrating Chainlink Data Streams as a price oracle. Onchain analysts raised concerns publicly starting in May 2026.u003c/pu003e\n\n\n\nu003cstrongu003eCan this type of manipulation happen on other prediction market platforms?u003c/strongu003e\n\nu003cpu003eYes. The vulnerability is structural to any event contract that settles on a real time financial price using an instant snapshot. Any platform, whether DeFi native or regulated, that uses single point price resolution is theoretically vulnerable. The difference is the cost of the attack and the surveillance infrastructure available to detect it. This is educational analysis, not investment advice.u003c/pu003eu003cpu003eu003cemu003eDisclaimer: This article is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency markets carry significant risk. Always conduct independent research before making investment decisions. Information is current as of August 8, 2026.u003c/emu003eu003c/pu003e","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.47.1","shortVersion":"4.47.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2658988067","isCrawlerRequest":true}