Threat actor xorcat claimed (on a dark Web forum) a breach of Polymarket, alleging a data leak impacting 300,000+ users. At this stage, the claims remain unverified and no detailed technical evidence has been publicly released. However, if accurate, the incident raises broader concerns around how crypto platforms handle user data, authentication flows, and third-party integrations. Platforms like Polymarket often rely on a mix of off-chain services and on-chain infrastructure, which can introduce additional attack surfaces if not tightly secured. Even partial exposure of user data could be leveraged for phishing, account takeover attempts, or targeted scams within the crypto ecosystem. Worth watching closely for any official response, technical breakdown, or indicators of compromise that may emerge.