DooDooLamb News
Google Security Engineer Arrested in Million-Dollar Polymarket Trading Scheme
Brief published May 29, 2026 ยท Original source published May 27, 2026
Original reporting by Kate Knibbs at wired.com.
Automated brief. Verify important details at the original source.
Google Security Engineer Discovers That Insider Trading Laws Apply Even When You're Really Good at Cybersecurity
A Google security engineer just learned that knowing how to protect systems from hackers doesn't automatically make you immune to federal wire fraud charges. Michele Spagnuolo, whose job was literally to keep Google's secrets safe, allegedly decided the best way to leverage those secrets was to bet over a million dollars on Polymarket using internal search traffic data that wasn't exactly meant for the gambling public.
Federal prosecutors are now explaining to Spagnuolo that "security engineer" doesn't mean "secure from the consequences of securities fraud," no matter how sophisticated his technical approach might have been. The 36-year-old allegedly used his access to Google's internal search analytics to place bets on Polymarket, the prediction market platform where people wager cryptocurrency on everything from election outcomes to whether Taylor Swift will announce another tour. Think of it as fantasy football for people who've replaced their sports obsession with an unhealthy fixation on being right about future events.
The irony here is thicker than the terms of service nobody reads. Spagnuolo's day job involved protecting Google from people trying to exploit their systems for unauthorized access to sensitive information. His alleged side hustle involved exploiting Google's systems to access sensitive information for unauthorized profit. It's like a cybersecurity expert getting phished by an email promising he's won the Nigerian lottery, except instead of falling for someone else's scam, he apparently decided to run his own.
Polymarket, for those blissfully unaware, is where the intersection of cryptocurrency enthusiasm and compulsive gambling meets the human desire to be smugly correct about predicting the future. Users bet on the outcomes of real-world events using USDC, a cryptocurrency pegged to the US dollar, because apparently regular money wasn't complicated enough for modern gambling. The platform exploded in popularity during the 2024 election cycle, when people discovered they could combine their political anxiety with financial anxiety into one convenient package.
The alleged scheme worked like this: Spagnuolo had access to Google's search traffic data, which can serve as a leading indicator for public interest in various topics. If search queries for "how to move to Canada" suddenly spike in certain states, that might tell you something about how people expect election results to go. If searches for a particular candidate's name surge in specific demographics, you might be able to predict polling trends before the polls are actually conducted. It's like having a crystal ball, except the crystal ball is made of aggregated user intent data and violates about seventeen different federal laws when used for personal profit.
What makes this particularly delicious is that Spagnuolo wasn't just any Google employee. Security engineers are supposed to be the moral backbone of tech companies, the people who think about threat models and attack vectors, who consider how systems might be abused by bad actors. They're trained to think like criminals in order to defend against them. Apparently, sometimes that training works a little too well. It's the classic "who watches the watchers" problem, except the watchers were watching search trends and placing bets based on what they saw.
The charges suggest Spagnuolo made over $1 million through his alleged trading scheme, which raises the question of how someone smart enough to become a Google security engineer could be dumb enough to think the feds wouldn't notice unusual trading patterns on a platform that's basically designed to be transparent. Polymarket transactions are recorded on the blockchain, creating a permanent, public record of every bet. Using insider information to trade on a platform where all trades are permanently recorded for posterity is like robbing a bank while livestreaming on Instagram.
This case highlights a broader issue in the tech industry: the gap between technical sophistication and basic common sense about regulatory compliance. Silicon Valley is full of brilliant engineers who can architect systems to handle billions of users but somehow convince themselves that securities laws don't apply to their clever new use of data. It's the same mindset that brought us "it's not a taxi company, it's a technology platform" and "we're not storing personal data, we're providing cloud services." The belief that technical innovation creates legal immunity is as persistent as it is wrong.
For the rest of us watching this unfold, it serves as a reminder that the house always wins, even when the house is the federal government and the game is "let's see if we can outsmart insider trading laws using cryptocurrency gambling platforms." Spagnuolo joins the long tradition of smart people who forgot that being clever with technology doesn't make you cleverer than the law. The only prediction he should have been making was that this wouldn't end well.