Polymarket Fixes Supply-Chain Attack After $2.71 Million in Losses

Polymarket restored service Friday after fixing a security breach on its international platform; the incident caused about $2.71 million in user losses, and the company pledged full reimbursement. GoPlus, a security firm, attributed the breach to a supply-chain compromise involving a real-user monitoring (RUM) script from DebugBear, a performance monitoring provider. The firm said malicious code reached Polymarket user pages and misused permissions for trading and transaction signing. The main on-chain path involved 710 DepositWallets and 731 addresses, with estimated losses of about $2.71 million.

Source: TokenPost