$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Summary
A supply chain attack has resulted in over $2 million being drained from Polymarket traders. Malicious code embedded in a website monitoring tool was used to hijack logged-in Polymarket sessions and steal user funds.
IFF Assessment
FOE
This attack demonstrates a successful exploitation of a supply chain vulnerability, leading to significant financial loss for users, which is detrimental to the cybersecurity landscape.
Defender Context
This incident highlights the critical risks associated with supply chain attacks, where compromise of a trusted third-party tool can have devastating consequences. Defenders must prioritize vetting the security of all integrated tools and services, and implement robust monitoring for unusual session activity or data exfiltration.