Polymarket says Thursday's outages came from a third-party provider compromise and that anyone affected will be made whole. Reports say a poisoned performance-monitoring script (DebugBear) loaded on polymarket.com hijacked logged-in sessions and dumped positions; about 995 accounts and more than $2M were hit.
What to do: Nov 2: THN: $2.7M taken in under an hour from 726 wallets via the hijacked DebugBear script; $3.9M refunded.
Polymarket said outages Thursday were due to a third-party provider compromise, and said "anyone who has been impacted will be made whole"
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
🚨995 Polymarket accounts just got drained through Polymarket's own website. Let me explain how, because this one should scare everyone in crypto. No fake link. No shady airdrop. These people were on the real Polymarket dot com on Thursday. Polymarket's site
🚨 $2.7 MILLION stolen from Polymarket traders in under an hour. The attackers didn't need to steal private keys. They hijacked a third-party DebugBear script and abused signed-in sessions to drain funds and trading positions. 726 wallets affected. $3.9M in r
Why this score
Plan rubric with caps (verified sweep, Oct 31)