Srey Leak

Independent Security Researcher, Anti-Scam Educator · Long Beach, California

Srey Leak

Independent security researcher and anti-scam educator based in Long Beach, California. Son of Cambodian refugees. Previously at Chainalysis (2016-2019) and Coinbase (2019-2022). Stanford MS Computer Security, UC Berkeley BS Computer Science.

Research Focus

Account security: Session Keys, separate signers, hardware wallets
Anti-scam education: red flags, phishing detection, multilingual scams
On-chain forensics: tracing stolen funds, transaction analysis

Key Findings (October 2026)

As of October 2026, the critical security event for Polymarket users:

June 25, 2026: frontend supply-chain attack via third-party vendor
Approximately $3.1M compromised across 11+ accounts
Attack vector: PUSD → ETH swap through malicious contract
Official response: Polymarket issued full refunds to all affected users
Any third-party “recovery service” requesting seed phrases is fraudulent

Anti-Scam Position

Legitimate Polymarket support never asks for seed phrases or private keys. If someone requests credentials for “recovery”, it is a scam. We educate — we do not recover funds.

Profiles

GitHub: github.com/sreyleak-security
Substack: sreyleak-security.substack.com

Disclaimer

Not affiliated with Polymarket. Not financial advice. Educational purposes only.