Polymarket halts trading after $2.7M drained via compromised third-party script
cyb3rops · x · 2026-10-30
Polymarket confirmed a security incident on its international platform: a third-party provider was compromised, prompting a temporary trading halt, a referral to law enforcement, and a commitment to make impacted users whole.
The poster says roughly $2.7M was drained, tracing it to debugbear, a third-party script the site used for website speed analysis. The takeaway: the bigger risk isn't single CVEs but chaining vulnerabilities across the supply chain — and as attackers scale with AI agents, the moat shifts to the agent framework and its scannable attack surface.
More from AGI Musings
- Long-Horizon Agents is the fastest-rising task on Papers with Code: 49 papers in 30 days — NielsRogge · 2026-10-30
- Dev laments clients now just paste Claude-generated replies verbatim — IgorCarron · 2026-10-30
- Investor floats an "AGI Berkshire": hoarding powered land, data assets and compute contracts — abhiadesai · 2026-10-30
- Researcher warns AI's pace of change and FOMO are bad for human health — akbirthko · 2026-10-30
- 'Stochastic gradual disempowerment': a new shorthand for AI risk in one tweet — nabla_theta · 2026-10-30
- AI Governance in Finance: When No One Can Explain Who Approved the Model's Decision — mikeflache · 2026-10-30