How collateral custody works in on-chain prediction markets
Collateral custody exists on a spectrum. At one end, fully non-custodial systems hold user funds entirely in smart contracts. At the other, fully custodial platforms control everything - wallets, funds, and settlement. Between them sits a hybrid model, and Polymarket is the clearest example.
The three custody models
Fully non-custodial. The user connects their own wallet. No platform ever touches the private key. Funds sit in a prediction-markets/prediction-market-smart-contract-exploit-risk/">smart contract until the market resolves, and the user initiates every transaction. The downside is friction: every trade costs gas, every approval is a separate on-chain action. Speed suffers.
Fully custodial. The platform holds the wallet. It manages deposits, withdrawals, and trades. Users trust the platform not to run off with the money or block withdrawals. Settlement may or may not happen on-chain. The user has no direct control.
Hybrid (Polymarket’s model). Polymarket uses a hybrid structure. User USDC is deposited into an on-chain smart contract that is real and audited, but the platform controls the order flow. When you place a trade on Polymarket, the match happens off-chain. Only the final settlement is written to the blockchain.
This means the funds themselves are not custodied by the company. They sit in a contract you could theoretically interact with directly, but the trades you see on the order book are not transactions you can broadcast yourself. The platform chooses which orders to fill, in what order, and at what price. It maintains the matching engine.
Private key risk is real
A common assumption: because your USDC is in a smart contract, your wallet cannot be emptied of positions. Not quite true.
If your private key is compromised, an attacker can sign messages to transfer your outcome tokens or redeem them before you can. On Polymarket, positions are represented as ERC-1155 tokens in your wallet, and anyone holding your key can move them. The same applies to approval-based mechanisms: an attacker can drain approval allowances.
The smart contract storing the collateral is not the weak point. Your own private key management is. No custody model fixes this. Non-custodial systems give you control, and they also give an attacker control if you lose the key.
The misconception about decentralization
Polymarket is often called fully decentralized. It is not.
The order matching is centralised. The user interface is a website the company controls. The resolution process relies on an oracle system with human validators. In practice, Polymarket can freeze markets, halt trading, or remove liquidity pools - these are not smart-contract restrictions, they are operational decisions the platform can enforce.
What is decentralised: the settlement. When a market resolves, the outcome tokens are redeemed on-chain. The USDC moves according to the smart contract logic. No entity can reverse a settlement once confirmed, but that is a narrow kind of decentralisation. The platform still chooses which markets to list, how to match orders, and when to update the front end. Users who treat Polymarket as a trustless system are ignoring the layers of central control.
Other hybrids exist
Augur was designed as fully non-custodial. It never controlled the order flow, but it failed on usability and liquidity. Most users today accept some centralisation for speed.
Some platforms keep a small operating wallet for gas fees: users deposit collateral into the main contract, but the platform pays for transaction submission. That is also hybrid. The platform never touches your principal, but it controls the conditions under which your transactions execute.
What this means for you
Know which model you are using. If the platform holds private keys, you have no recourse if they disappear. If the platform only controls the order book, your funds are safer from platform theft, but your trading experience is still dependent on their infrastructure. If the platform operates fully on-chain, you control everything - and you also pay for everything.
No single model is always better. The right trade-offs depend on what you value: speed, control, or simplicity. Just do not confuse partial on-chain settlement with complete user sovereignty. They are not the same thing.
Not financial advice. wswap.site publishes market data and general information about digital assets. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.