Researchers described the vulnerability as "structural" [20, 34]. "The vulnerability is structural," they wrote, meaning it was baked into the contract design, not the result of a few bad actors .
Effective August 7, 2026, at 00:00 UTC, Polymarket's crypto up/down markets no longer settle against a single price snapshot [38, 39, 42]. Instead, they use a chainlink-powered time-weighted average price [40, 44]. The averaging window scales with market duration:
Polymarket explicitly stated the change was made "to protect market integrity" [8, 40]. To support liquidity through the transition, the platform added $1 million in liquidity rewards across all impacted markets for the month of August [40, 44].
Notably, only the closing price transitioned to an average; the opening price is still a single snapshot . This asymmetry has drawn some commentary, but the core fix — making it far more expensive and risky to move the settlement price — is expected to sharply reduce manipulation incentives.
Polymarket's settlement overhaul arrives amid a complex and shifting regulatory landscape centered on the U.S. Commodity Futures Trading Commission (CFTC):
2022 Enforcement Action: In January 2022, the CFTC fined Polymarket (then operating as Blockratize, Inc.) $1.4 million and issued a cease-and-desist order for offering off-exchange event-based binary options and failing to register as a Swap Execution Facility [1, 2, 7]. Polymarket subsequently blocked all U.S. users .
Federal Investigations Closed (July 2025): The DOJ and CFTC closed their respective investigations into Polymarket in July 2025 without bringing any charges, a decision widely attributed to the shifting regulatory stance under the Trump administration [13, 14].
CFTC-Approved U.S. Reentry (September 2025): On September 3, 2025, the CFTC issued a no-action letter permitting Polymarket to resume U.S. operations through a newly acquired CFTC-registered entity (QCX LLC / Polymarket US), subject to conditions on swap data reporting and recordkeeping [3, 5, 8]. A formal Amended Order of Designation followed in November 2025 [4, 11].
Structural Separation: Polymarket now operates two distinct platforms: the international exchange (polymarket.com, geoblocked for U.S. IPs) and a separate CFTC-regulated U.S. exchange that launched in December 2025 . The U.S. exchange removed its waitlist in May 2026 and is open to users via iOS app
.
Ongoing Scrutiny: Despite the regulatory approvals, the CFTC continues to conduct an "extensive investigation" into certain Polymarket activities, including separate allegations related to fake bets and fabricated winnings in influencer markets, as reported by the Wall Street Journal in June 2026 .
The TWAP settlement change is the most direct evidence yet that platform design choices have real consequences for market integrity. The Stanford/SMU study demonstrated that even on a blockchain-based platform with transparent, auditable transactions, structural vulnerabilities can persist if the settlement mechanism creates the wrong incentives . The fact that simply switching to longer windows or averaged pricing eliminated manipulation suggests that responsible design — not just transparency — is the key to fair prediction markets.
For traders, the lesson is straightforward: the five-minute Bitcoin markets that once offered rapid-fire action also carried an invisible tax in the form of systematic exploitation by sophisticated actors. For regulators, the study provides a clear framework for evaluating whether other prediction market designs harbor similar vulnerabilities.
As Polymarket navigates its dual existence — an international exchange for the rest of the world and a CFTC-regulated platform for U.S. users — the TWAP change signals a willingness to adapt. But with the CFTC still investigating other aspects of the platform, the scrutiny is far from over.