Futures
Access hundreds of perpetual contracts
TradFi
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Launch
CandyDrop
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Promotions
AI
Gate AI
Your all-in-one conversational AI partner
Gate AI Bot
Use Gate AI directly in your social App
GateClaw
Gate Blue Lobster, ready to go
Gate for AI Agent
AI infrastructure, Gate MCP, Skills, and CLI
Gate Skills Hub
10K+ Skills
From office tasks to trading, the all-in-one skill hub makes AI even more useful.
GateRouter
Smartly choose from 30+ AI models, with 0% extra fees
Polymarket suspected of data breach, over 300k records and vulnerability exploitation toolkit leaked
April 29 News, the decentralized prediction market platform Polymarket is suspected to have been hacked, with the malicious actor xorcat posting over 300k data records and a corresponding vulnerability exploitation toolkit on a well-known cybercrime forum.
It is claimed that the attacker extracted data through undisclosed API endpoints, pagination bypasses, and CORS misconfigurations in Polymarket Gamma and CLOB APIs.
The leaked content includes: 10k users’ complete personal information (including names, proxy wallets, and basic addresses), 4,111 comments, 1,000 report records (including 58 ETH addresses and admin authentication addresses), 48,536 Gamma market metadata entries, over 250k active CLOB market fixed-product market maker addresses, and social graph data of 9,000 followers.
The toolkit contains proof-of-concept code for multiple vulnerabilities, including CVE-2025-62718 (AxiosNO_PROXY bypass, CVSS 9.9, capable of triggering server-side request forgery), CVE-2024-51479 (Next.js middleware authentication bypass, CVSS 7.5), and CORS misconfigurations.
Additionally, the toolkit includes automated continuous pull scripts and a complete red team report.