Hackers steal 2 point 7 million dollars from Polymarket script injection
Hackers compromised a third-party analytics script to drain 2.7 million dollars from 726 Polymarket user wallets on October 29.
FTMQ Security, written by our newsroom0 views
Hackers compromised an external script on the prediction market platform Polymarket on October 29 to steal approximately 2.7 million dollars from user accounts. The Hacker News, dev.ua, Israel Defense, Gambling News, and Hackread all reported that the unauthorized access affected 726 wallets. Polymarket confirmed it is reimbursing all impacted traders. [1][3][4][5][6]
The intruder replaced a page-speed monitoring script loaded from DebugBear with malicious code, according to The Hacker News and Hackread. Once loaded on the site, the compromised script automatically liquidated positions belonging to signed-in traders and transferred the underlying funds directly to addresses controlled by the attackers. Gambling News reported that Polymarket had to temporarily pause trading following the intrusion. [1][5][6]
Polymarket operates as a cryptocurrency-based prediction platform established in 2020. The platform allows users to deposit cryptocurrency via the Polygon blockchain network to trade shares on various future events. [7]
Polymarket is actively issuing full refunds totaling about 2.7 million dollars to all 726 affected wallet holders, according to reports from The Hacker News and dev.ua. [1][3]
In short
- Hackers compromised a third-party DebugBear script on Polymarket on October 29.
- The malicious script liquidated positions and stole 2.7 million dollars from 726 wallets.
- Polymarket paused trading and is fully reimbursing all affected traders.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptThe Hacker News, 17h ago (the report this story comes from)
- [2]North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software PackagesCyberSecurityNews, 1d ago
- [3]Hackers stole $2.7 million from Polymarket. The prediction platform compensates for losses on 726 wallets. How it happeneddev.ua, 16h ago
- [4]Hackers Steal $2.7 Million from More Than 700 Polymarket AccountsIsrael Defense, 17h ago
- [5]Polymarket Had to Pause Trading After Hackers Stole $2.7M from the PlatformGambling News, 2d ago
- [6]Polymarket Users Lose $2.7 Million in Third-Party Script HackHackread, 1d ago
Background
- [7]Polymarket on Wikipedia
- [8]Axie Infinity on Wikipedia
- [9]Chromecast on Wikipedia
Our newsroom writes these reports with the help of software, from the 9 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Binance hit by record six point three billion dollar cryptocurrency theftTop Stories, 1d ago
- Chainalysis suffers cybersecurity breach exposing customer contact dataTop Stories, 1d ago
- Discord security bot Double Counter breached exposing user email addressesTop Stories, 25d ago
- OpenAI internal models hack websites and drain crypto walletPrivacy and Compliance, 13d ago
- Zeabur shuts down following massive breach of user data and credentialsTop Stories, 12d ago
More in Top Stories
- Northstar Security emerges from stealth with seven million dollars in funding1h ago
- Alpine Linux rebuilds GitLab infrastructure after severe exploit attempt1h ago
- FBI links North Korean hackers to record Binance cryptocurrency heist1h ago
- Critical LXD and MicroCloud Security Flaw Receives Maximum CVSS Score3h ago
- CISA adds actively exploited Ivanti flaws to known vulnerabilities catalog1d ago
- Syrian Electronic Army Hacker Sentenced to 42 Months in US Court1d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.