Trade
Basic
Futures
Futures
Hundreds of contracts settled in USDT or BTC
TradFi
Gold
Trade global traditional assets with USDT in one place
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Futures Kickoff
Get prepared for your futures trading
Futures Events
Participate in events to win generous rewards
Demo Trading
Use virtual funds to experience risk-free trading
Earn
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Launchpad
Be early to the next big token project
Alpha Points
Trade on-chain assets and enjoy airdrop rewards!
Futures Points
Earn futures points and claim airdrop rewards
Investment
Simple Earn
Earn interests with idle tokens
Auto-Invest
Auto-invest on a regular basis
Dual Investment
Buy low and sell high to take profits from price fluctuations
Soft Staking
Earn rewards with flexible staking
Crypto Loan
0 Fees
Pledge one crypto to borrow another
Lending Center
One-stop lending hub
VIP Wealth Hub
Customized wealth management empowers your assets growth
Private Wealth Management
Customized asset management to grow your digital assets
Quant Fund
Top asset management team helps you profit without hassle
Staking
Stake cryptos to earn in PoS products
Smart Leverage
New
No forced liquidation before maturity, worry-free leveraged gains
GUSD Minting
Use USDT/USDC to mint GUSD for treasury-level yields
More
GoPlus: Polymarket Hacked, Off-Chain and On-Chain Transaction Result Synchronization Mechanism Has Flaws
Deep Tide TechFlow News, February 20 — According to the GoPlus Chinese community, the prediction market platform Polymarket was hacked due to a design flaw in the synchronization mechanism between off-chain and on-chain transaction results in its order system. The attacker manipulated nonces to cause on-chain matched transactions to be canceled or invalidated before settlement, while off-chain records remained valid, leading to API false reports, affecting trading bots like Negrisk, and resulting in user losses.
The attack process is analyzed as follows:
The attacker submits/matches large reverse trades with a market-making bot on Polymarket’s off-chain order book.
The attacker constructs transactions with forged/repeated nonces or exploits on-chain nonce competition, causing on-chain transactions to inevitably revert.
Polymarket API returns “Trade Successful” to the bot before on-chain confirmation, leading the bot to believe positions are hedged, while the on-chain state has not yet changed.
The attacker then exploits the exposed direction of the bot with real on-chain transactions, achieving “risk-free” profit.
Since the revert occurs at the blockchain layer, Polymarket fees do not explode, making the attack cost manageable and sustainable.
GoPlus recommends users pause automated trading tools, verify on-chain transaction statuses, strengthen wallet security, and closely monitor official Polymarket announcements.