During the Polymarket attack, KOLs falsely claimed their accounts were hacked to piggyback on the hype and promote referral links.

According to PolyBeats monitoring, in the early hours of October 30, Polymarket's international site had user positions stolen by an embedded third-party script, with total losses currently estimated at approximately $2.5M. While the attack was still ongoing, trader Car (X account CarOnPolymarket), who has earned over $1.5M in total profit on Polymarket, posted claiming to have been robbed of approximately $800k, and included his own Polymarket referral link in the post.

Subsequently, traders checked the on-chain records and found that Car's wallet transferred approximately $750k to another account, lolzzzlol, during the period when the website was under attack. That account had prior interactions with Car before this attack incident and is believed by the community to belong to Car himself; multiple discussions concluded that he was "using this wave of attention to promote his own referral link."

After community discussion of the incident increased, Car deleted the post and tried to walk it back, changing his story to claim that he had promptly transferred funds to a friend and preserved about $700k, and also praised the official team for freezing the account within one minute.