Polymarket halts trading after hijacked DebugBear script drains ~$2.6M from users
flngr · x · 2026-10-30
Polymarket suffered a major security incident: a hijacked third-party monitoring script from DebugBear, embedded via Polymarket's own website, sold users' positions and routed roughly $2.6M to a single wallet.
- Polymarket halted trading, switching the exchange to cancel-only mode and pausing relayer actions
- The company confirmed a third-party provider was compromised, referred the case to law enforcement, and promised to make affected users whole
- DebugBear advised websites using its RUM product to remove the embed code
- The attacker wallet has since been emptied
Related event: Polymarket Supply-Chain Attack Drains Over $2.5 Million From Users(4 posts)→
More from Venture
- Gerber Kawasaki: Market wrongly penalizes companies investing in future via capex — inductionheads · 2026-10-30
- Google Tests Blending Ads Into AI Mode, Launches Multiturn Ads in US — OnlineInference · 2026-10-30
- 85% of AMZN's quarterly net income came from Anthropic stake appreciation, sparking circularity debate — aronchick · 2026-10-30
- Investor: Nasdaq has at least 5% more to fall, QQQ support at 681 — pdamodaran · 2026-10-30
- SuperMe Raises $20M Series A to Turn Expert Experience into Chat-ready AI Profiles — dariusmc · 2026-10-30
- Even 2020-era GPUs keep gaining rental value, undercutting the AI bubble thesis — JFPuget · 2026-10-30