RC RANDOM CHAOS

Polymarket's Oracle Problem: Hairdryers on Weather Sensors and Insider Bets

· via Schneier on Security

Original source

Hacking Polymarket

Schneier on Security →

Prediction market Polymarket lets users wager on real-world events, but the platform’s reliance on external truth sources is becoming an attack surface. Verification of outcomes depends on journalists, sensors, and other oracles that were never designed to resist financially motivated adversaries — and gamblers are now applying pressure directly to those sources.

Reported abuses include threats against a journalist whose reporting was being used to settle a market, and physical tampering with weather sensors (hairdryers held to thermometers) to swing bets tied to temperature readings. Insider trading on the platform is also widespread.

The broader lesson is that prediction markets inherit the integrity of their oracles. When the payout depends on a single reporter, instrument, or data feed, attackers will go after that weakest link rather than the smart contract. Beyond the integrity issue, the platform’s incentive structure raises serious ethical concerns, including markets that effectively reward harm to specific people.

Read the full article

Continue reading at Schneier on Security →

This is an AI-generated summary. Read the original for the full story.