Hackers stole around $3 million from Polymarket users after compromising one of the company’s third-party vendors in a supply-chain attack.
The attackers injected a malicious script into part of Polymarket’s website. When some users visited the site, they were tricked into approving fake crypto transactions, allowing the hackers to steal funds from their wallets.
Polymarket says the attack has been stopped, the compromised third-party software has been removed, and every affected user will receive a full refund.