Polymarket Disputes Data Breach Claims by Hacker "Xorcat"

A hacker operating under the alias "Xorcat" alleged a data breach of Polymarket, claiming to have stolen 300,000 user records by exploiting API flaws. Polymarket has publicly rejected these claims, suggesting the incident may instead involve data scraping rather than a direct breach. No specific technical details, such as CVE IDs or exact API vulnerabilities, were disclosed in the report. The dispute centers on whether the exposed data originated from a compromise or publicly accessible sources. No confirmed impact, such as financial loss or unauthorized access, has been verified. The incident remains under investigation with conflicting narratives from both parties.