Polymarket's Vice President of Engineering, Josh Stevens, announced that a security incident occurred due to the leak of a legacy private key used for six years. According to Foresight News, the key was part of internal deposit configurations, leading to the transfer of funds. The private key has now been rotated, all production environment permissions have been revoked, and a complete migration to a KMS key management solution is underway. Stevens emphasized that neither Polymarket nor UMA contracts were attacked, ensuring user funds remain secure and the platform continues to operate normally.