The Commodity Futures Trading Commission is again probing Polymarket over allegations it permitted U.S. users to access its offshore platform, potentially violating a 2022 settlement agreement that imposed a $1.4 million civil monetary penalty.

The original CFTC order in January 2022 found Polymarket operated an unregistered derivatives exchange and offered illegal off-exchange event contracts to U.S. persons. Polymarket, built on the Polygon blockchain, allows users to bet on real-world events through smart contracts that handle market creation and resolution. The 2022 settlement required the platform to cease offering unregistered event contracts to U.S. persons and implement geo-blocking measures.

This renewed scrutiny sends a direct signal to DeFi protocols in the prediction market space: regulators are actively monitoring compliance with prior orders, particularly concerning U.S. user access. The core tension remains permissionless, decentralized access against jurisdictional regulatory demands for KYC and AML compliance.

IP-based geo-blocking, the standard method most protocols use, is easily circumvented with a VPN. For traders holding positions or eyeing these markets, this regulatory overhang matters—front-end interfaces, not smart contracts, become the point of attack. Operators face a real choice: maintain decentralization or implement compliance measures that restrict access.

A finding of non-compliance could trigger additional civil penalties, revised settlement terms, or enforcement actions against protocol operators or associated entities.