Is Insider Trading on Polymarket Illegal? The Iran-Strike Bets, Bubblemaps Findings, and What Congress May Do
Legal information, not legal advice. If you have concerns about your trading activity, consult a qualified attorney.
On May 18, 2026, blockchain analytics firm Bubblemaps published findings on nine linked Polymarket accounts that collectively earned more than $2.4 million by betting on the exact timing of US military operations against Iran — with a 98% win rate that Bubblemaps CEO Nicolas Vaiman described as "statistically impossible without prior information." CoinDesk's May 21 follow-up reported that Congress is now drafting legislation to ban prediction markets on national-security events.
The story has reopened a question that has hung over prediction markets since their first regulated launch: is insider trading on Polymarket actually illegal?
The honest answer is "sometimes." The reasoning matters.
Why securities insider-trading law does not apply
The federal insider-trading framework — Rule 10b-5, the misappropriation theory, Regulation FD — is built on Section 10(b) of the Securities Exchange Act. It applies to securities. Event contracts on Polymarket and Kalshi are not securities. They are derivatives traded on a CFTC-regulated designated contract market, exactly like a corn future or an oil future.
There is no SEC jurisdiction over a Polymarket trade. The SEC cannot bring an insider-trading case against an event-contract trader. This is the structural fact most coverage gets wrong.
What can still make it illegal
Three separate legal hooks still apply.
1. CFTC Section 6(c)(1) anti-manipulation. The Commodity Exchange Act prohibits "manipulative or deceptive devices" in connection with any contract on a registered exchange. The CFTC has used this provision to prosecute traders who used material non-public information in futures markets. The same theory applies to event contracts. Penalties: up to $1M per violation plus disgorgement.
2. Wire fraud (18 USC § 1343). If the trader misappropriated the information — for example, a government employee using classified intelligence — the trade itself can constitute wire fraud. This is how the DOJ prosecuted the May 2025 indictment of a military reservist who traded Iran-strike contracts. Maximum penalty: 20 years.
3. Unauthorized disclosure of classified information (18 USC § 798). Separate from the trade, leaking the underlying intelligence is a felony. This is what catches government insiders even when the CFTC declines to bring its own case.
So: "is insider trading on Polymarket illegal?" depends on who you are and how you got the information. A retail trader who reads a news leak before the market reacts — not illegal. A defense contractor who trades on classified internal briefings — almost certainly illegal under multiple statutes.
What the Bubblemaps findings actually show
Bubblemaps' methodology was on-chain wallet clustering. Polymarket runs on Polygon, so every trade is publicly visible. The firm identified nine wallets that:
- Were funded from the same upstream USDC address within a 72-hour window
- Traded only on US-Iran strike timing markets between March and May 2026
- Hit YES at prices between 8 and 14 cents within hours of strike events
- Posted a 98% win rate across 80+ positions
A 98% win rate on probability-market trades placed at sub-15-cent prices is — as Vaiman put it — statistically impossible without advance information. The base-rate expected hit rate on those positions is the market price: roughly 10%.
This is not proof of insider trading. It is strong circumstantial evidence sufficient to justify a CFTC investigation. Polymarket has confirmed the accounts are frozen and that it is cooperating with regulators.
What Polymarket's terms of service say
Independent of federal law, Polymarket's user agreement (Section 8.3) prohibits trading on "material non-public information of any kind, regardless of whether such trading would be illegal under applicable law." Violations allow Polymarket to:
- Freeze the account
- Cancel open positions at last-traded prices
- Claw back proceeds from closed positions resolved in the trader's favor
- Refer accounts to law enforcement
This contractual remedy is faster than any government enforcement action. The nine flagged accounts are already frozen and any pending payouts withheld.
What Congress is now proposing
CoinDesk's May 21 reporting cited draft legislation from at least two House offices that would:
- Ban event contracts on "national security events" — defined to include military operations, foreign intelligence outcomes, and assassination markets
- Require CFTC-regulated platforms to implement KYC-based trading limits on geopolitical markets
- Add a five-year statutory bar for federal employees in national-security roles
The first proposal is the most contentious. Defining a "national security event" is harder than it sounds — a market on "will the US reach a trade deal with China by year-end" arguably touches national security. The industry response is likely to focus on narrowing the definition rather than opposing the bill outright.
Realistic timeline: hearings in June-July 2026, markup in fall, possible floor action in early 2027. The May 21 momentum is real but legislative cycles are slow.
What this means for ordinary traders
If you are not a government employee, military insider, or someone with non-public information about an event contract you are trading, none of this affects you directly. Trading on publicly available information — even information most traders have not noticed yet — is the entire point of a prediction market. It is the same edge a good macro trader has on a Fed contract.
What does affect you:
- Expect more KYC. Polymarket and Kalshi will both tighten identity verification on geopolitics markets. If you trade those categories, keep your KYC current.
- Expect contract menus to narrow. Even before legislation passes, both platforms are likely to self-restrict the most aggressive national-security markets. The CFTC's "public interest" review standard gives them cover to do so.
- Expect spreads to widen temporarily on geopolitics contracts. Market makers will pull liquidity until they have clarity on the new rules.
The structural product is fine. The edge cases are getting policed. That is roughly the same trajectory every regulated derivatives market has gone through.
For more on the regulatory framework, see are prediction markets legal in the US and our full Polymarket review.
