Polymarket Supply-Chain Attack Drains Over $2.5 Million From Users

Polymarket suffered a supply-chain attack in which a hijacked third-party script let attackers liquidate users' positions without passwords and drain about $2.6 million to a single address; the platform blamed an external authentication vendor, halted trading, and reported the incident.

2026-10-30 ~ 2026-10-30 · 4 related posts

• Polymarket hacked: users report stolen funds, platform blames external auth provider — RSync25 · 2026-10-30
• Polymarket hacked via compromised third-party script, over $2.5M drained — zacharynado · 2026-10-30
• Polymarket halts trading after supply-chain attack drains user funds without passwords — WeldPond · 2026-10-30
• Polymarket halts trading after hijacked DebugBear script drains ~$2.6M from users — flngr · 2026-10-30