Polymarket has lit up two red lights simultaneously in the past couple of days. I won't draw conclusions, but I'll lay out these two lights for you.

The first one: security. A hacking attack on its platform had its loss amount revised upward to $3.1 million. What's more awkward is the timeline: just a few days ago, it publicly promised full reimbursement to users, and right after that, the loss figure got adjusted upward. The promise of reimbursement came first, the hole got bigger later.

The second one: marketing. According to reports, @Polymarket is under investigation for allegedly using false or deceptive marketing tactics. A prediction market that built its reputation on "we are the most authentic and accurate" — now the very way it used to market itself is being questioned as potentially watered down.

By the rules, let me be clear. A hacking attack does not equate to it being malicious; an investigation is just an investigation — before the conclusion comes out, no one should rush to judgment. Each of these two incidents, taken alone, is not fatal.

But when I look at these two lights together, I see the same problem: this company has packaged itself as the most decentralized, transparent, and trustworthy one. Yet in its actual operations, on one side, its compensation promise can change at any moment; on the other, its marketing tactics are under regulatory scrutiny. The gap between the story it tells to the outside and its actual internal operations is widening.

I won't define it for you — facts are still emerging, and the conclusion awaits the investigation. I just think that a company that constantly talks about "trust" should be most tested by its own consistency between words and actions.

Whether these two lights will go out next or merge into one — just keep watching and you'll know.