Polymarket was just hit by hackers, who are said to have siphoned roughly $2.7 million from hundreds of accounts on the platform. Polymarket had to temporarily cancel trading due to the attack, although it has since resumed operation.
Reports say that Polymarket was hacked on October 29 when a third-party software compromised the platform, affecting hundreds of users. The hack targeted the Polymarket.com crypto-based exchange instead of the company’s US-facing platform. As it turned out, hackers had tampered with the website’s JavaScript code, affecting how traders interacted with the site, without them even realizing it.
The attack is also said to have involved DebugBear, a third-party performance monitor. According to reports, modified script hosted on DebugBear allowed the hackers to exploit existing logged-in sessions. The hackers were thus able to tap into customers’ wallets, either selling or transferring assets to attacker-controlled wallets.
