Polymarket Users Lose $2.7 Million in Third-Party Script Hack
Prediction market platform Polymarket briefly halted trading on its international exchange on Thursday, October 29, after users reported unauthorized withdrawals from their wallets. Blockchain analytics firms Betting Intelligence and Polysights estimated that attackers took about $2.7 million from 710 wallets.
The incident involved a compromised third-party performance-monitoring script supplied by DebugBear, a UK-based website performance vendor whose code ran on Polymarket.com.
How the DebugBear Script Was Abused
In its post-incident update, Polymarket said the attacker replaced DebugBear’s monitoring script with malicious code designed to target its users. For users who had Polymarket open during a short window, the script used their active sessions to sell trading positions and move funds out of their wallets.
The incident didn’t involve a reported breach of Polymarket’s smart contracts; instead, attackers reportedly abused a trusted third-party script running on the website. Polymarket removed the compromised code, cleared its caches, paused trading and...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
