The private key only caused trouble after six years; who should take the blame for Polymarket?

In the Polymarket private key leak incident, $164k has been frozen, accounting for approximately 28.6% of the total transferred amount of $573.2k. The incident did not affect Polymarket or UMA smart contracts, and user funds remain secure with normal platform operations. Investigations show that the incident originated from a private key that had been in use for about six years and was leaked, which was used for internal recharge configurations, leading to continuous fund transfers to the affected address. The relevant team is still tracking the remaining fund flows.