Polymarket: Bettors Tampered with Paris Weather Sensor

📋 En bref (TL;DR)

Bettors physically tampered with a Météo France temperature sensor at Paris-Charles de Gaulle Airport to manipulate Polymarket weather prediction markets. Two incidents (April 6 and 15) netted over $34,000 in winnings. Météo France has filed a criminal complaint with the air transport gendarmerie. The case exposes a fundamental flaw in prediction markets: the vulnerability of “physical oracles” connecting the real world to the blockchain.

What happened: two manipulations in 10 days at Paris-CDG

Between April 6 and 15, 2026, one or more individuals physically tampered with a Météo France temperature sensor at the Charles de Gaulle Airport weather station (station LFPG). The goal: to rig temperature prediction markets on Polymarket.

The scheme is as simple as it is audacious. Polymarket runs daily markets asking “What will be the highest temperature in Paris?” with ranges (13°C or below, 14°C, 15°C… up to 23°C or above). Resolution relies on Weather Underground data, which pulls directly from the LFPG Météo France station.

By physically manipulating the sensor — likely by placing a heating device near the thermometer — the bettors triggered artificial temperature spikes at the strategic moment, flipping market resolution in their favor.

April 6: $14,000 won from “a few dozen dollars”

The first incident occurred on April 6. Before 6 PM, the maximum temperature of 18°C seemed certain, with a 95% probability on Polymarket. Then, around 7 PM, the sensor suddenly registered a spike above 21°C — a jump of more than 3 degrees in just minutes, completely inconsistent with the day’s weather.

The temperature dropped back down immediately. Result: a bettor pocketed $14,000 from a stake of just a few dozen dollars. Suspicious detail: their Polymarket account had been created only two days prior.

April 15: encore, over $20,000 this time

Nine days later, the scenario repeated. On April 14 and 16, recorded maximum temperatures in Paris ranged between 18-19°C. But on April 15, the sensor mysteriously displayed 22°C.

On Polymarket, the probability for that range swung from 0.1% to 95% in just 30 minutes. A bettor won over $20,000 this time. Total trading volume on that market reached $590,527 — an unusually high figure.

Meteorologist’s analysis: “highly improbable”

Ruben Hallali, a meteorologist with a PhD in atmospheric sciences from McGill University, former Météo France employee and co-founder of HD Rain, analyzed the data for BFMTV:

“Such temperature variations appear highly improbable, particularly on these two dates and over such a short timeframe. One can imagine an individual with good knowledge of how the sensors work intervened physically at the sensor level to raise temperatures by two degrees at the right moment.”

Météo France files criminal complaint: up to 7 years in prison

Météo France confirmed it:

Conducted physical observations on one of its instruments (signs of tampering detected)
Performed a detailed analysis of sensor data
Filed a formal criminal complaint with the Roissy Air Transport Gendarmerie Brigade

The offense falls under Article 323-2 of the French Penal Code: “alteration of the functioning of an automated data processing system.” The standard penalty is 5 years imprisonment and €150,000 fine. Since Météo France is a public institution, aggravated penalties apply: 7 years in prison and €300,000 fine.

Additional charges for fraud (Article 313-1) and trespassing into a protected zone could follow.

Polymarket’s silent response

Polymarket issued no official statement on the matter. However, the platform took one concrete action: switching the resolution source for Paris weather markets from Charles de Gaulle (LFPG) to Paris-Le Bourget (LFPB).

Notably, the payouts on the manipulated markets were not reversed. Markets resolved as recorded, and the suspected manipulators kept their winnings.

The “physical oracle attack”: a new type of manipulation

This case illustrates a fundamental problem for decentralized prediction markets: the vulnerability of physical oracles.

Unlike digital oracle attacks (such as the March 2025 UMA governance attack where a whale used 5 million tokens to force a resolution), this targets the very first link in the data chain: the physical sensor itself.

The resolution chain is linear and vulnerable:

Physical sensor → Météo France → Weather Underground → Polymarket resolution

You cannot decentralize a thermometer. This flaw exposes the limits of prediction markets relying on real-world data: as long as the source is a single physical point of failure, it remains manipulable by anyone with access to the sensor and an understanding of the resolution mechanism.

Polymarket: a growing list of controversies

The Paris sensor affair joins an already long list of alleged manipulations on Polymarket:

October 2024: French trader accused of manipulating Trump election odds with 4 linked accounts ($85M in winnings)
March 2025: UMA governance attack — whale forces a “Yes” resolution with 5M tokens ($7M at stake)
January 2026: Suspicious bets on Venezuela placed before public announcement ($400K+)
March 2026: Suspicious Iran bets scrutinized by US Congress ($850K+)
April 2026: Biden pardon insider trading revealed by NPR/Bubblemaps ($316K profit)

Lessons for the future of prediction markets

The Polymarket-Météo France affair raises essential questions for the future of prediction markets:

Source diversification: resolving a market from a single sensor is an invitation to manipulation. Multi-source systems or weighted averages would be more robust.
Anomaly detection: a 3°C variation in minutes should trigger automatic alerts before resolution.
KYC and traceability: an account created 48 hours before a $14,000 win on a weather market should be a red flag.
Legal jurisdiction: Polymarket operates from the British Virgin Islands, but the victims (Météo France, national weather data integrity) are in France. Jurisdictional questions remain open.

With 183 active weather markets and over $3 million in total volume, the stakes go far beyond $34,000. It’s the credibility of all prediction markets based on physical data that’s now in question.

Glossary

Oracle

A service that connects real-world data (prices, weather, results) to a blockchain to resolve smart contracts or prediction markets.

Prediction market

A platform where users bet on the outcome of future events. Bet prices reflect the perceived probability of each outcome.

Supply chain attack

An attack targeting a weak link in the supply chain (data, software, infrastructure) rather than the final target directly.

UMA

Universal Market Access — a decentralized oracle protocol used by Polymarket to resolve markets through a voting mechanism.

KYC

Know Your Customer — an identity verification procedure mandatory on regulated financial platforms.

Resolution

The process by which a prediction market determines the final outcome and distributes winnings to successful bettors.

Frequently Asked Questions

How did the bettors manipulate the Météo France sensor?

According to meteorologist Ruben Hallali’s analysis, an individual with knowledge of sensor operations likely placed a heating device near the thermometer at the LFPG station at Paris-CDG Airport, causing an artificial 3°C spike in minutes. The manipulation was timed precisely to flip the Polymarket market outcome.

How much did the bettors win on Polymarket?

Over $34,000 total across two separate incidents: approximately $14,000 on April 6 (from a stake of just a few dozen dollars) and over $20,000 on April 15, 2026. Trading volume on the April 15 market reached $590,527.

What criminal penalties do the manipulators face?

The offense falls under Article 323-2 of the French Penal Code (altering an automated data processing system). Since Météo France is a public institution, aggravated penalties apply: up to 7 years imprisonment and €300,000 fine. Additional fraud charges under Article 313-1 could follow.

Did Polymarket reverse the manipulated market payouts?

No. Polymarket issued no official statement and did not reverse the manipulated market results. The only action taken was switching the resolution source for Paris weather markets from Charles de Gaulle Airport (LFPG) to Paris-Le Bourget (LFPB).

What is a physical oracle attack?

Unlike digital oracle attacks (manipulating on-chain votes or prices), a physical oracle attack targets the real-world sensor or data source feeding the blockchain. It’s the most vulnerable link because you cannot “decentralize” a physical thermometer or weather sensor.

Sources

BFMTV — Polymarket: did bettors manipulate a Météo France sensor to get rich? (April 20, 2026)

Cryptoast — Weather sensor manipulation: how far will Polymarket bettors go? (April 21, 2026)

Journal du Coin — Polymarket: $14,000 won after suspicious temperature spike in Paris (April 21, 2026)

Légifrance — Article 323-2 of the French Penal Code

Polymarket — Paris Weather Prediction Markets