cryptd.in

另类 LinkedIn 适合加密人才

Polymarket to Refund Users After Hackers Steal $3M in Frontend Attack

-

由

cryptd.in
于

Polymarket confirmed Friday that a compromised third-party vendor allowed attackers to inject malicious code into its frontend, draining about $3 million from fewer than 15 user accounts.

The platform says it will fully refund all affected users.

What Happened

The attack was first flagged by on-chain security researcher Specter, who posted that an apparent phishing campaign had drained funds from more than 11 victim wallets holding Polymarket’s PUSD stablecoin.

At the time, they estimated losses at $2.94 million, with PeckShield confirming the figure shortly after and noting that the attacker had bridged the stolen funds from Polygon to Ethereum and converted them into 1,893 ETH.

The prediction market acknowledged the breach through one of its official accounts, Polymarket Traders.

“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it and removed the affected dependency,” it wrote on X. “We’re contacting impacted users and refunding them in full.”

William LeGate, who works closely with the platform, echoed news about the compensation, repeating that the issue had been resolved and that affected users would get back their money in full.

Another blockchain security account, GoPlus Security, described the incident as a supply chain attack. It said that the malicious code affected about 15 accounts, with losses totaling $3 million, a conclusion that was also reached by Bubblemaps, which praised Polymarket’s response after the losses were contained.

A Recurring Problem

This is not the first time Polymarket has been hit. Last month, the platform disclosed another breach in which an admin wallet used for employee reward top-ups was drained of about $700,000, likely through a private key compromise. At first, crypto sleuth ZachXBT had estimated the losses to be around $520,000, with Bubblemaps later quoting the higher figure after tracking the funds across several addresses.

Developer Josh Stevens confirmed at the time that a 6-year-old private key had been exposed through an internal configuration and that the company had since rotated credentials and moved to key management services. However, that incident did not touch user funds or core contracts.

While the two incidents involved different attack methods, they both targeted systems outside Polymarket’s prediction markets themselves. Furthermore, the latest one has come at a time when the platform is already navigating other reputational headwinds, including a recent report by the Wall Street Journal, which claimed that it had paid college-age creators between $2,000 and $3,000 per month to post videos of staged bets on dummy versions of the Polymarket website, with not even one of the over 1,100 clips traceable to real blockchain activity.

There was also another controversy early this month when a trader claimed that they had lost $500,000 after the prediction service allegedly changed resolution rules for a market tied to Strategy’s Bitcoin sale.

职位 Polymarket to Refund Users After Hackers Steal $3M in Frontend Attack 首次出现在 加密土豆.

评论

發佈留言

發佈留言必須填寫的電子郵件地址不會公開。 必填欄位標示為 *

最新信息

热门类别

zh_TW 繁體中文
zh_TW 繁體中文 en_US English ro_RO Română et Eesti ko_KR 한국어 ja 日本語 ru_RU Русский de_DE Deutsch es_ES Español zh_CN 简体中文 fr_FR Français pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български cs_CZ Čeština fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

搜索网站

热门故事

标签

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #Bitcoin (458) #BitcoinETF (3) #itcoinFundamentals (1) # 比特币处理 (1) # 比特币价格 (5) # 比特币价格水平 (1) #BitcoinPump (1) #BitcoinReserve (1) #BitcoinSurge (1) #itcoinTop (1) #Bitfinex (1) #Bitwise (1) #BracebridgeCapital (1) #BRC20Tokens (1) #BTC 收购 (1) 1TP5 看涨预测 (1) #BullishSentiment (1) #C 中国矿业 (1) #CPIPreview (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #ogecoinGains (1) #ogecoinVolume (1) #DutchCourt (2) #ECommerce (1) #El萨尔瓦多比特币 (1) #E以太坊 (74) #EthereumPain (1) #E以太坊价格 (1) #ExpertOpinion (1) #FedRateCut (1) #FiatCurrency (1) #F 财务影响 (1) #F 财务隐私 (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #InflationData (1) #Investment (1) #InvestmentLoss (1) #JapaneseFirm (1) #L LegalAction (1) #L 法律影响 (1) #Legislation (1) #LightningNetwork (1) #M 市场分析 (3) #M 市场监测 (1) #M 市场预测 (1) #M 市场预测 (1) #M 市场投影 (1) #M 市场支持 (1) #M 市场波动性 (1) #M 婚姻 (1) #MemeCoin (5) #MemeCoins (2) #Miner 盈利能力 (1) #M 洗钱 (2) #MtGox (4) #朝鲜加密货币 (1) #诺沃格拉茨预测 (1) 1TP5价格里程碑 (1) #P 价格预测 (2) 1TP5价格问题 (1) #PriceSurge (1) #PrisonSentence (1) # 量化分析 (1) #R 监管压力 (1) #SECA Anti-Crypto (1) #ShibaInu (6) #SocialBuzz (1) #T 技术分析 (1) #Toncoin (3) #T 龙卷风现金 (3) #T 龙卷风现金发展项目 (1) #T 龙卷风现金开发者 (1) #UKCrypto (1) #UpsidePotential (1) #USCongress (1) #WyomingLand (1) #XRPPrice (1) #XRPupswing (1)

实用链接

我发现了一些有用的链接，希望与大家分享。