How Polymarket Holds Your Money, and Where the Risks Are

Polymarket does not hold your money the way a bank or a brokerage does. Your funds sit in a crypto wallet you control, or in a proxy wallet that the platform helps you manage, and they are committed to conditional-token contracts when you trade. That design gives you more control than a custodial exchange, but it also means that losing your keys or approving the wrong contract can be irreversible.

This article explains the custody chain, the difference between wallet types and the risks at each step.

The deposit chain

A typical deposit has four steps:

1. You buy USDC on an exchange or another wallet.
2. You send it to Polygon, either directly or through a bridge.
3. You deposit it into your Polymarket wallet.
4. The platform credits your trading balance and uses the USDC as collateral.

Each step has a failure point. Sending USDC on the wrong network can lose the funds. Using a bridge with insufficient liquidity can result in a delayed or failed transfer. Sending to the wrong address is irreversible.

The wallets and deposits guide covers the operational details.

Wallet types

Polymarket supports more than one login method, and the custody model differs.

Wallet login. You connect a self-custodial wallet such as MetaMask or a hardware wallet. You control the private key. Polymarket's interface can create a proxy wallet for trading, but the ultimate control remains with your wallet.

Email or social login. Polymarket can create an embedded wallet for users who do not want to manage a seed phrase. The key may be managed by a third-party provider, often with a recovery mechanism. This is convenient, but it is closer to a custodial model than a hardware wallet.

The distinction matters if the platform restricts access. A self-custodial user can interact with the contracts directly; an email user may depend on the platform's interface and the wallet provider.

Where the money sits during a trade

When you buy a YES share, the platform locks USDC in a conditional-token contract. The contract holds the collateral until the market resolves. If you sell before resolution, the contract releases the proceeds to the buyer and credits your wallet.

The funds are not lent out, invested or used to pay other users. They are collateral for the outcome. That is why Polymarket can describe itself as non-custodial in the trading sense.

The Polygon infrastructure article explains the contract layer.

The risks

Private-key loss. If you lose your seed phrase and your wallet has no recovery mechanism, the funds are gone. Polymarket cannot restore them.

Phishing. Fake websites, fake support accounts and malicious browser extensions can steal keys or trick you into signing a transaction. Always use the official domain and verify URLs.

Malicious approvals. Some contracts ask for unlimited permission to spend your tokens. If the contract is malicious or exploited, your wallet can be drained. Revoke approvals you no longer need.

Bridge risk. Bridges are complex and have been hacked. Use a reputable bridge, test with a small amount and avoid unknown tokens.

Stablecoin risk. USDC can be frozen by its issuer in some circumstances. A sanctioned address or a legal order could affect funds.

Platform access risk. If you cannot reach the interface, you may not be able to close a position. Keep a backup of your wallet and, if possible, know how to interact with the contracts directly.

Resolution risk. The contract pays according to the oracle. If the market resolves incorrectly, the custody chain works as designed but the economic outcome is wrong. The resolution guide explains the dispute process.

Withdrawals

A withdrawal reverses the deposit chain. You sell or redeem your position, the contract releases USDC to your wallet, and you send it to an exchange or another wallet.

The practical issues are:

• Which network to use. Sending USDC on the wrong chain can lose funds.
• The withdrawal fee. It varies by network and congestion.
• The minimum amount. Small withdrawals may not be economical.
• The exchange's deposit rules. Some exchanges require a specific network or memo.

The withdrawal guide covers the steps.

How to reduce custody risk

A simple checklist:

1. Use a dedicated wallet with only trading funds.
2. Back up the seed phrase offline and never share it.
3. Use a hardware wallet for large balances.
4. Verify the domain before connecting.
5. Revoke unused approvals.
6. Test withdrawals with a small amount.
7. Keep records of every deposit, trade and withdrawal.
8. Do not leave more on the platform than you need.

The counterparty question

Even in a non-custodial model, you have counterparties. The oracle, the stablecoin issuer, the bridge and the platform's interface are all part of the chain. If one fails, your ability to access or redeem funds can be affected.

The practical approach is to diversify. Do not keep all your trading capital on one platform. Do not rely on one bridge. Do not assume that a non-custodial label means no counterparty risk.

The bottom line

Polymarket's custody model is more transparent than a traditional sportsbook's, but it is not risk-free. The risks are technical, not just financial. If you would not feel comfortable managing a crypto wallet, use a small balance and learn the mechanics before scaling.

The risk management guide explains how to size positions and limit losses. The tax guide explains the records you need for reporting.