Polkadot is a network that connects many specialised blockchains, called parachains or rollups, under one shared security model. A central chain, the relay chain, coordinates them and its validators secure them all. DOT is the native token. It pays for blockspace ("coretime"), secures the network through staking and gives votes in on-chain governance. The newest change came in October 2026, when token holders approved dotUSD, a native stablecoin that is now live on Polkadot Hub.
What changed most recently (dated)
- 21 October 2026: wallet key leak. The Polkadot Community Foundation warned users of the third-party Fearless Wallet browser extension. Crypto Briefing reports that versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 sent users' private keys to an attacker-controlled server. Eight users reported unauthorised transactions totalling 17,286 DOT. The Foundation advises anyone who used the extension since February 2025 to treat those accounts as compromised, create new keys in a different wallet and move their funds. Fearless is not an official Polkadot wallet, and the Polkadot network itself was not breached.
- October 2026: dotUSD. OpenGov Referendum 1944 was approved with 98.5% of votes in favour (about 4.63 million DOT) and has been executed. It creates dotUSD as a protocol-owned asset, sets up a DOT/dotUSD liquidity pool on Asset Hub and draws about $5 million from the treasury: $2.5 million in USDT to mint dotUSD and $2.5 million in DOT for liquidity. In Phase 1, dotUSD is minted 1:1 against USDT up to a cap. A later phase plans DOT-collateralised vaults, an oracle and liquidations.
- 6 July 2026: staking changes enacted. Under Referendum 1910, nominators can no longer be slashed, and the nominator unbonding period fell from 28 days to about 2 days (2 eras). Validators are still slashable and must hold a minimum self-stake of 10,000 DOT.
- 14 March 2026: new issuance schedule. Annual issuance fell from about 120 million DOT to about 55 million DOT. From then on it falls every two years by 13.14% of the supply still to be minted, toward a hard cap of 2.1 billion DOT. Token holders approved the cap in Referendum 1710 in September 2025.
- 6 March 2026: first US spot DOT ETF. 21Shares launched TDOT on Nasdaq with a 0.30% fee. 21Shares' product page showed about $8.0 million in net assets on 21 August 2026.
- April 2026: Hyperbridge exploit. An attacker forged a cross-chain message on Hyperbridge, a third-party bridge, and minted about 1 billion bridged DOT on Ethereum. On 16 April the team revised the losses to about $2.5 million. Native DOT on Polkadot was not affected.
How Polkadot works
Relay chain
The relay chain has "deliberately minimal functionality," in the words of the Polkadot wiki. It produces blocks, schedules cores, keeps data available and provides shared security. It does not run user-facing features. Since 4 November 2025, accounts, balances, staking and governance have run on Asset Hub, a system chain.
Parachains and shared security
Parachains are independent blockchains with their own logic and often their own tokens. Each submits proofs that the relay chain validators check. As a result, a parachain's security rests on the relay chain validator set and on nothing else. The coupling works both ways: if the relay chain reverts, its parachains revert with it.
Coretime instead of slot auctions
Polkadot sells its execution capacity as "coretime," paid in DOT. On 19 September 2024 Agile Coretime replaced the old parachain slot auctions, and existing leases moved over. There are two ways to buy it:
- Bulk coretime: a fixed 28-day block of time on a core. It is held as an NFT that can be split, shared or resold, and it can be renewed every month.
- On-demand coretime: a near-real-time bid to have a single block validated. It suits chains that produce blocks only occasionally.
Smart contracts on Polkadot Hub
The official developer docs call Polkadot Hub "a production-ready smart contract platform" with two backends. REVM runs existing Ethereum bytecode unchanged. PVM is a RISC-V engine for heavier workloads, programmed in Solidity via resolc or in Rust. Standard Ethereum tools such as MetaMask, Hardhat, Remix and Foundry work with it.
Bridges
Bridges carry data and assets between Polkadot and outside networks. Native bridges are secured through the relay chain's consensus. Third-party bridges carry their own risk, as the Hyperbridge exploit showed.
What DOT is used for
- Coretime: buying blockspace for parachains and rollups.
- Staking: nominated proof-of-stake (NPoS). Nominators back validators and share in the rewards.
- Governance: OpenGov voting. A vote's weight is the DOT locked times a conviction multiplier, from 0.1x with no lock up to 6x for the longest lock. Approved runtime upgrades go live automatically, because the runtime is stored on-chain as WebAssembly.
Does the Fearless Wallet leak affect you?
Answer two questions to see what the October 2026 Polkadot notices mean for your accounts.
Have you used the third-party Fearless Wallet browser extension at any time since February 2025?
- Yes → Treat those accounts as compromised
- Not sure → Check before you assume you are safe
- No → next question
Is your DOT native DOT on Polkadot, or bridged DOT on Ethereum that came through Hyperbridge?
- Native DOT on Polkadot → The leak notice does not point at you
- Bridged DOT on Ethereum via Hyperbridge → Your risk sits with the bridge, not the network
The Polkadot Community Foundation advises anyone who used the extension since February 2025 to treat those accounts as compromised, create new keys in a different wallet and move their funds. Crypto Briefing reports that versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 sent private keys to an attacker-controlled server.
Look at the browser extensions you have installed now and in the past. If Fearless Wallet was among them at any point since February 2025, the Foundation's advice is to treat those accounts as compromised, create new keys in a different wallet and move your funds.
Fearless is not an official Polkadot wallet, and the Polkadot network itself was not breached. The April Hyperbridge exploit did not affect native DOT on Polkadot either.
In April 2026 an attacker forged a cross-chain message on Hyperbridge, a third-party bridge, and minted about 1 billion bridged DOT on Ethereum; the team put losses at about $2.5 million. Third-party bridges carry their own risk, separate from native DOT on Polkadot.
This covers only the Fearless Wallet notice and the Hyperbridge exploit described in the article: it cannot check your own accounts or other wallets, and the full set of chains affected by Hyperbridge beyond Ethereum is not verified.
How DOT staking works
| Item | Value | Source note |
|---|---|---|
| Minimum to join a nomination pool | 1 DOT | Polkadot wiki chain-state values |
| Minimum to nominate directly | 250 DOT | Polkadot wiki |
| Validators a direct nominator can back | Up to 16 | Polkadot wiki |
| Nominator unbonding | About 2 days (since Ref 1910) | Polkadot forum, 6 July 2026; the wiki still lists 28 days |
| Reward claim window | 84 eras (about 84 days) | Polkadot wiki |
| Validator minimum self-stake | 10,000 DOT | Polkadot wiki, forum |
Unbonding requests started before Referendum 1910 still follow the old 28-day schedule. Staking rewards vary with network participation and with the new issuance schedule. No current yield figure is given here.
Polkadot vs Ethereum
Ethereum is a single smart contract chain that scales through rollups. Polkadot coordinates many chains, each with its own logic, and secures them all with one validator set. Since the Hub launch, Polkadot can also run Ethereum contracts directly, so the gap between the two models is smaller than it was.
Risks worth knowing
- Bridges and wallets: the two 2026 incidents both hit third-party software, not the core protocol: a bridge in April and a wallet extension in October.
- Thin ETF demand: TDOT held about $8 million in net assets in August 2026.
- Price history: DOT traded near $1.07 on 24 October 2026, according to Blockchain.News, far below its 2021 levels.
Origins
Gavin Wood, an Ethereum co-founder who is credited with coining "Web 3.0" in 2014, published the Polkadot whitepaper in 2016. The network launched on 26 May 2020. The Web3 Foundation supports Polkadot, and Parity Technologies, which Wood co-founded, develops much of its core software. Kusama, a separate network with the KSM token, began as Polkadot's "canary network" for testing new features under real conditions.
Limitations: some figures come from single secondary outlets (the price and the Fearless loss total), and the Polkadot wiki has not been updated for every 2026 change.
