Prediction market platform Polymarket temporarily halted trading after hackers compromised a third-party service to distribute a cryptocurrency-draining script, with approximately $2.5 million in assets traced to a suspected attacker wallet.
The vulnerability or weakness
The incident involved a malicious JavaScript hosted on cdn.debugbear.com that was designed to steal cryptocurrency and prediction-market holdings.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
The trading suspension and subsequent resolution affected Polymarket's operations, potentially causing inconvenience to users and raising concerns about the platform's security measures. The company is reimbursing affected traders, but the exact financial impact is not stated in the sources.
Industries affected
The incident affects the cryptocurrency and prediction market sectors, highlighting the risks associated with third-party services and the importance of robust security practices.
Users affected
Polymarket users, particularly those with substantial investments, may experience financial loss and disruption. The company is working to make users whole, but the reimbursement process details are not specified.
Build these skills
Sources
- Polymarket halts trading after crypto-draining script breach, $2.5M traced (BleepingComputer)
