Hackers drain about $2.7 million from Polymarket traders through hijacked script

First reported by RuntimeWire at · Updated · 2 sources

Attackers replaced an external DebugBear page-speed script with malicious code that sold some signed-in traders' positions and transferred their funds on October 29, according to The Hacker News. The publication reports that Polymarket says it is refunding about $2.7 million to 726 affected wallets following the attack on its website.

  • RuntimeWire reports researcher Matt Kirkland found DebugBear's registry update preceded the first stolen funds by 25 minutes.

Covered by 2 publishers within 11 hours of the first report.

Reporting2

RuntimeWire DebugBear's domain record changed minutes before the Polymarket drain, researcher says · Emerson Redding
The Hacker News Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script · info@thehackernews.com (The Hacker News)