Threat actors stole approximately $2.7 million from Polymarket traders by compromising an external page-speed script supplied by DebugBear. The injected malicious code automatically liquidated positions of authenticated users and transferred the assets to attacker-controlled wallets. Polymarket has confirmed that all 726 affected wallet addresses will be fully reimbursed.

supply-chaincryptocurrencythird-partyscript-hijacking
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →