Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked Debug Bear Script
Summary: Malicious code on Polymarket's website on October 29 replaced a page-speed script the site loaded from DebugBear and sold signed-in traders' positions, moving funds to hackers. Polymarket is refunding about $2.7 million to 726 affected wallets, and blockchain records show crypto worth about $2.64 million reached the hackers' wallet in under an hour.
What you should know: The attack came through a third-party script Polymarket loaded from an outside vendor, and the malicious code reused the access a signed-in trader already had in an open page - so a supplier's compromised DNS records became 726 drained wallets and a $3.9 million refund bill.
Read the original at The Hacker News ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026