Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Summary
Hackers compromised Polymarket by injecting malicious code into a third-party script, leading to the theft of approximately $2.7 million from traders' accounts. Polymarket has stated they will refund the affected users, with blockchain records confirming the stolen funds reached unauthorized wallets.
IFF Assessment
This incident represents a loss of funds and a breach of user trust, indicating a successful attack by malicious actors.
Defender Context
This incident highlights the risks associated with supply chain attacks, where third-party scripts can be compromised to inject malicious code. Defenders should pay close attention to the security posture of their software supply chain and implement robust monitoring for unauthorized script modifications or unexpected network traffic.