More than 700 Polymarket users appear to have been hit in Thursday’s attack. Blockchain investigators estimate roughly $2.7 million was stolen. The hackers reportedly got in through DebugBear, a British company whose monitoring software was installed on Polymarket’s website. They slipped malicious code into the service. Once loaded, it could access users’ active trading sessions, sell their positions and transfer their crypto.
Polymarket shut down trading on its international platform while it dealt with the breach. It has since reopened and says affected users will get their money back. The company also referred the incident to UK law enforcement. DebugBear has acknowledged a security incident and told customers to remove its monitoring code from their websites.
This is the second serious breach involving Polymarket this year. A similar third-party security problem in June cost users more than $2 million. The latest attack is now raising questions about how a platform valued at billions of dollars allowed outside software to gain access to customers’ trading sessions and assets. The separate Polymarket US platform was not affected.
Got a news tip or correction? Let us know
If you got something out of this, please chip in to keep this site running, or subscribe to go ad-free.
0 views