• Prediction Markets

Did Insiders Rack Up $529 Million in Polymarket Trading Before the Iran Strike?

Insider trading is illegal in securities markets, and regulators have increasingly signaled that the same concept applies to event contracts when traders use material nonpublic information.

What made the February 28 Iran-strike market so controversial wasn’t just that people bet on conflict, it was that a tight cluster of accounts appeared to bet with unusually precise timing, then walked away with outsized gains.

The Pattern Analysts Flagged

Multiple outlets reported that Polymarket saw roughly $529 million in total trading volume tied to contracts about the timing of U.S. strikes on Iran, with the February 28 contract drawing a large share of attention.

The central claim – reported by Bloomberg and repeated by several publications – is that six wallets/accounts showed a set of behaviors that look “coordinated” or at least atypical:

They were freshly created in February, had limited or near-single-topic histories, and placed their heaviest “YES” buys hours before the first explosions were reported. In some cases, those “YES” shares were purchased at around $0.10, a price that implies the market believed the strike was unlikely, right up until the final hours. 

Bubblemaps (an onchain analytics firm) is widely cited as the source that surfaced the “six-wallet” cluster, describing funding patterns and timing that—at minimum—raise red flags for information leakage or advance knowledge. 

Who Are the Six Accounts?

Public reporting does not consistently publish full wallet addresses in accessible sources, but several accounts are named across coverage:

Dicedicedice
This account has a public Polymarket profile showing it joined in February 2026, with a relatively high positions value and only a small number of predictions visible in the profile snapshot, which aligns with the “new account” pattern described in reporting. 

Planktonbets
Also publicly visible as joined February 2026, with a large positions value and multiple predictions. Several writeups describe it as part of the flagged cluster and note it made a series of smaller “probe” bets on nearby dates before the successful February 28 positioning—behavior observers interpreted as “decoy” activity or iterative timing attempts. 

Neodbs
Likewise shows joined February 2026 with a comparatively narrow profile footprint and a concentrated positions value, consistent with “fresh account, narrow topic” characteristics described by Bubblemaps-linked coverage.

Lettucehead718 and suffix-295
These two labels show up in reporting as wallets that executed trades at identical timestamps on February 27 (within seconds), a detail often cited as suggestive of coordination. Unlike the handles above, they are not consistently available as easily browsable Polymarket profile pages in public indexing, but the behavioral description – paired timing and limited histories – is repeatedly emphasized.

The Sixth Wallet
Coverage generally agrees the cluster was six wallets, but only some articles list more than three by name. When outlets don’t name all six, they still repeat the shared attributes: February account creation, limited trading history, concentrated exposure to the Feb. 28 strike contract, and last-minute buys.

Why This Cluster Looked Different From “Normal Speculation”

Plenty of traders can rationally speculate on geopolitical escalation. What made this episode stand out was the combination of:

1. Account timing (newly created, then immediately large positions)
2. Narrow focus (little activity outside strike-date contracts)
3. Precision (loading up on the exact date contract)
4. Synchronized execution (at least two wallets placing trades at identical timestamps)
5. Late entry (heavy buying just hours before public confirmation) 

Those features are why analysts and lawmakers started using the phrase “insider-like” behavior—even while acknowledging that proof of insider knowledge is a higher bar than pattern recognition. 

The High-Profile Accounts That Added Fuel

Separate from the “six new wallets” narrative, public debate intensified because visible usernames also appeared to profit heavily. For example, reporting highlighted Magamyman as an account questioned by Rep. Mike Levin due to timing and scale, though multiple stories stress there is no public evidence linking it to an official or insider.

Media coverage also cited Dicedicedice as one of the notable profit-takers on the strike timing.

What We Still Don’t Know (and What Would Matter)

At the time of reporting, a recurring line across coverage is that there is no publicly available proof that these wallets were operated by government insiders.
To move from “suspicious pattern” to “insider trading,” investigators would typically need evidence such as:

• Links between wallets (funding source patterns, shared counterparty flows, common off-ramp behavior)
• Offchain identity correlation (KYC points, exchange logs, device/IP clustering—if available)
• Communication evidence (leaks, messages, coordination traces)

That’s the core tension prediction markets create: they can be informationally useful, but the same low-friction access that makes them efficient also makes them attractive for anyone who believes they can trade on privileged knowledge.