Polymarket Hit by Fake-Bet Probe as MEV Bot Loses $7.5M and msUSD Crashes 90%

Crypto News

A prediction-market platform is facing scrutiny after an investigation alleged it staged fake winning bets to fuel viral growth. The probe found that roughly $1.9 million in wagers shown across 1,105 videos were not genuine, contradicting the company's core pitch that every trade settles on a public blockchain anyone can audit. Polymarket's real trades execute on Polygon and settle in USDC, with markets resolved through the permissionless UMA oracle. Yet its marketing campaign reportedly leaned on dummy websites such as poiymarket.com, designed to mimic the real platform, where college-age creators celebrated fabricated payouts. Roughly 70% of the reviewed clips showed a bet, but none of them were real.

The timing proved awkward, landing during Polymarket's contested return to the United States. Creators reportedly earned $2,000 to $3,000 a month and were asked not to disclose the payments, while a hired marketing firm pushed the clips past 140 million views. In roughly 118 videos, creators flaunted fictitious gains near $900,000 on bets that could have lost more than $166,000. The episode echoes earlier disputes over market resolution that damaged user trust. Regulators fined the platform $1.4 million in 2022 for running an unregistered market and ordered non-compliant trades halted; the company later reincorporated in Panama, reportedly sharing a law office once tied to FTX.

One of Ethereum's most active automated trading bots, known as JaredFromSubway, was drained of roughly $7.5 million after an attacker turned its own profit-seeking logic against it. Security researchers stressed the bot suffered no smart-contract exploit, phishing attack, or private-key leak. Instead, the attacker spent weeks deploying 66 fake token contracts that imitated Wrapped Ether, USDC, and Tether, mimicking the on-chain signals the bot was built to chase. The MEV bot scans Ethereum's mempool for profitable trades, executing front-running and back-running orders against traders on decentralized exchanges in a tactic known as a sandwich attack. Tricked into reading the decoys as opportunities, it granted token approvals to attacker-controlled contracts.

A single approval reportedly handed over more than 92 Wrapped Ether, and a final contract used those open allowances to siphon real funds from the bot's treasury. On-chain data shows part of the stolen proceeds was already routed through Tornado Cash. The bot became notorious in April 2023, when it burned over $1 million in gas fees in a single day, near 8% of Ethereum's total gas spend at the time. Its operator put the loss closer to $15 million and offered a $1 million bounty for the return of the funds. Recovery may now hinge entirely on whether the attacker accepts that offer, an uncomfortable reversal for a system long criticized as an invisible tax on ordinary traders.

Main Street USD, known as msUSD, lost its dollar peg on Saturday after its proof-of-reserves verifier abruptly terminated their agreement, wiping out most of the token's value within hours. The stablecoin had traded near $1 for months before collapsing to roughly $0.29, down about 71% over 24 hours, leaving a market capitalization near $5.3 million. The verifier, which runs real-time proof-of-reserves checks and says it has validated more than $1 billion in client assets, stated that Main Street failed to meet its standards and severed ties immediately. Once the feed stopped, the public dashboard it powered no longer verified any reserves backing the token.

Main Street marketed msUSD as a dollar always redeemable one-to-one against USDC, with staking minting a yield-bearing token that harvested returns from box-spread options pitched as institutional-grade. The design depended on outside verification feeds and integrations with larger platforms, and the protocol had promoted its yield market on Morpho, among the largest decentralized lenders holding billions in deposits. A security scanner warned the token ran on an upgradeable proxy contract whose owner could disable sales, mint new tokens, or alter fees. The collapse adds to a growing list of depeg events this year and underscores how quickly confidence evaporates when a stablecoin's backing comes into question.

Taken together, these episodes trace a single fault line running through crypto this week: the gap between what platforms claim and what their on-chain data can actually prove. A prediction market built on auditability marketed itself with fabricated bets, an automated bot's transparency became the map for its own draining, and a stablecoin's peg held only as long as an outside verifier vouched for it. COINOTAG's aggregate market data frames the backdrop, with the Fear and Greed Index at 23, firmly in extreme fear, and Bitcoin dominance near 70.1% as capital concentrates in majors. With total crypto market capitalization around $1.84 trillion, on-chain transparency remains the sector's strongest defense and its most exploitable weakness.