Skip to main content
cve.nowby Sazabi
Early warnings
SZB-d172816815

Polymarket suspends trading after reported third-party compromise, per BleepingComputer

Status
Corroborated, not yet confirmed by the vendor
Kind
Breach
Vendor
Polymarket
Product
Polymarket prediction market platform
First seen

Summary

BleepingComputer reports that Polymarket temporarily suspended trading after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript. The report says about $2.5 million in assets has been traced to a suspected attacker wallet.

If you use Polymarket

Avoid connecting crypto wallets to Polymarket until the company confirms the incident is resolved

Review and revoke any token approvals granted to Polymarket-related contracts or scripts

Watch for official Polymarket status updates on trading resumption and affected users

Check wallets for unexpected transactions and move funds if a signing prompt looks unfamiliar

Timeline

  1. Made public by BleepingComputer on Bluesky2 days
  2. First seen by cve.now1 day
  3. Record last updated

What the sources say 6

· BleepingComputer on Bluesky: “Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet.” Source

· Mastodon: “Polymarket halts trading after # crypto -draining script breach, $2.5M traced” Source

· Bluesky: “ICYMI: A third-party vendor bug let hackers drain $2.5M from Polymarket accounts #Polymarket #CryptoSecurity” Source

· Mastodon: “Polymarket 1h halt after vendor compromise; affected users will be 'made whole'” Source

· Mastodon: “Hackers replaced a monitoring script on Polymarket, using active sessions to sell users’ positions and steal $2.7M.” Source

· Mastodon: “The hackers gained access to the funds via software from DebugBear, a web analytics and website performance tool, according to a person familiar with the details who was granted anonymity to address an evolving security situation” Source