Polymarket Trader Exploits Latency for $120K

Why it matters

The exploit wasn't a sophisticated hack, but rather a classic case of information arbitrage. Bots monitored real-time price feeds from major centralized exchanges, trading on Polymarket's 15-minute crypto markets where short lags in price adjustments, sometimes between 30 to 90 seconds, created risk-free opportunities. This allowed traders to buy shares in an outcome that had already occurred before the platform's odds updated. This type of latency arbitrage has been a known issue, with one bot reportedly turning $313 into $414,000 in a single month by repeatedly executing this simple strategy thousands of times. The strategy relied on capitalizing on the delay between rapid spot price changes and Polymarket's slower oracle updates, which for its fastest markets, relies on Chainlink Data Streams. In response to these exploits, Polymarket introduced a dynamic taker-fee model specifically for its 15-minute crypto markets to neutralize latency-based strategies. The fees are highest when market odds are near 50/50, the prime target for these arbitrage bots, making the strategy unprofitable at scale. These collected fees are then redistributed to liquidity providers through a Maker Rebates Program, incentivizing deeper order books. This is not the only vulnerability that sophisticated traders have targeted. A more recent exploit involved a "race condition" where attackers could invalidate their losing orders after they were matched but before they settled on-chain. This was achieved by manipulating the transaction nonce, creating "ghost fills" that would cause trading bots to misread their true positions, leading to losses for other users.

Key numbers

• A trader on the prediction market Polymarket reportedly exploited a 5-minute latency in its Up/Down markets to generate over $120,000 in profits with a 100% win rate.
• Bots monitored real-time price feeds from major centralized exchanges, trading on Polymarket's 15-minute crypto markets where short lags in price adjustments, sometimes between 30 to 90 seconds, created risk-free opportunities.
• This type of latency arbitrage has been a known issue, with one bot reportedly turning $313 into $414,000 in a single month by repeatedly executing this simple strategy thousands of times.
• In response to these exploits, Polymarket introduced a dynamic taker-fee model specifically for its 15-minute crypto markets to neutralize latency-based strategies.

What happens next

• The fees are highest when market odds are near 50/50, the prime target for these arbitrage bots, making the strategy unprofitable at scale.
• A more recent exploit involved a "race condition" where attackers could invalidate their losing orders after they were matched but before they settled on-chain.

Sources

• exploited a 5-minute latency
• The exploit wasn't a
• Bots monitored real-time
• This type of latency
• A more recent exploit
• This was achieved by

Quick answers