On a Tuesday in June 2025, the City of Baltimore filed a lawsuit against Polymarket and Kalshi, alleging they operate illegal sports betting platforms. The numbers are straightforward: the city seeks an injunction, $1,000 per violation per day, and disgorgement of profits. But the deeper story lies not in the legal briefs but in the code. The line between an 'event contract' and a 'wager' is a legal fiction that smart contracts — by design — cannot enforce. Logic holds until the ledger bleeds.
Context: Polymarket and Kalshi are the two leading prediction market platforms in the U.S. Polymarket runs on Polygon, using an AMM model for liquidity; Kalshi is a CFTC-registered designated contract market with a centralized order book. Both were sued by Baltimore on the same day, alongside earlier actions by Kentucky, Wisconsin, Nevada, and New York. The core of the dispute: the platforms call their products 'event contracts' — financial instruments that allow users to bet on outcomes like election results or sports scores. The city calls them sports betting, period. The platforms have a powerful defense: federal preemption. They argue that the CFTC already regulates these contracts, so state laws cannot override federal authority. That argument has worked before. But Baltimore is not challenging the federal classification — it is enforcing state gambling laws, which have historically been a state prerogative.
Core: I have spent years auditing smart contracts that automate financial decisions. The Aave v2 stress tests I ran in 2020 taught me that liquidity pools are fragile under regulatory pressure. Polymarket’s technical architecture is elegant: an AMM that pools USDC, an optimistic oracle from UMA for dispute resolution, and a Polygon sidechain for cheap transactions. But elegance does not confer legal immunity. The real issue is geo-blocking. Polymarket uses IP-based restrictions and KYC to limit U.S. users, but these are perimeter defenses, not constitutional protections. A determined user in Baltimore can still access the platform via a VPN. The smart contract doesn’t ask where you are — it only checks your wallet balance. Code compiles; people break.
From my experience building a zero-knowledge proof system for GDPR compliance, I learned that cryptographic guarantees are useless if the legal framework treats them as opaque. The same applies here: the architecture of Polymarket makes it borderless, but the law demands borders. The state’s approach is clever: instead of debating whether event contracts are securities or futures, they argue they are gambling. The UMA oracle does not care about state lines — it settles a contract based on real-world data, not jurisdiction. That is the vulnerability. The platform’s reliance on a decentralized oracle for outcome determination actually strengthens the state’s case: it shows that the outcome is determined by an external event, not by the platform’s management, which is a hallmark of gambling.
Contrarian: The conventional wisdom is that the federal preemption argument will save Polymarket. I disagree. The real risk is not the lawsuit itself but the self-reinforcing cycle of de-risking that it triggers. When JPMorgan terminated its banking relationship with Polymarket, it was not a political statement — it was a compliance decision. Banks see a company facing multiple state lawsuits, high regulatory uncertainty, and a business model that regulators are calling illegal. The response is to cut ties. That creates operational friction: payment processing, payroll, tax services. Trust is a variable, not a constant.
Once one bank walks away, others follow. The message is clear: Polymarket is a high-risk counterparty. This has a second-order effect: liquidity providers, who are often institutional, may also withdraw. They thrive on legal certainty, not legal ambiguity. The Baltimore case, if successful, becomes a template for other states. Kentucky, Wisconsin, Nevada, and New York are already watching. The cost of compliance — implementing state-level KYC, geolocation, and reporting — would destroy the user experience that made prediction markets attractive. The contrarian view is that the biggest threat to Polymarket is not a court judgment but a slow bleed of financial infrastructure. The platform may win in court but lose in the market.
Takeaway: The prediction market industry is at a crossroads. The Baltimore case will determine whether these platforms can exist as regulated entities or be forced into the shadows. The federal preemption argument is strong, but it relies on the assumption that the CFTC’s authority over 'event contracts' is exclusive. That assumption has never been tested against state gambling laws. If the courts side with Baltimore, the code will have to adapt — not by becoming more transparent, but by becoming more invisible. The platforms will retreat to offshore jurisdictions, where enforcement is weak. That is the tragedy of regulatory overreach: it pushes innovation into unregulated spaces, where users have no protection. Silence is the only audit that matters.
Based on my audit experience, I have seen how a single legal decision can reshape an entire sector. The Terra-Luna collapse taught me that human idealism often overrides mathematical certainty. Here, the idealism is about the power of decentralized markets to aggregate information. The reality is that the law is not a smart contract. It is a sociotechnical system that demands compromise. The future of prediction markets will be written not in Solidity but in legal briefs. And the first draft is being written in Baltimore.