Polymarket to Refund Users After Scammers Swipe Millions in Website Exploit - Decrypt

In brief

Hackers exploited a compromised third-party vendor to steal about $3 million from a handful of Polymarket users.

Polymarket says the issue is fixed and affected users will be fully reimbursed.

It marks the platform's second security incident in two months.

One of Polymarket’s third-party vendors suffered a hack Thursday, the prediction market said, leaving its website vulnerable to an exploit that analysts said led to millions of dollars lost for users of the platform.Polymarket declined comment when reached by Decrypt, and did not say publicly which of its vendors was compromised. But the attack allowed hackers to inject malicious code into the prediction market’s front-end, the company said in an X post.Ultimately, the hackers stole some $3 million worth of customer funds.On-chain sleuths at Bubblemaps concluded that potential damage from the hack was largely contained, with less than 15 user accounts affected. The blockchain investigations firm did not immediately respond to Decrypt’s request for comment.