Polymarket to reimburse users after supply-chain attack causes estimated $3 million in losses
Summary
Polymarket says it will reimburse users after malicious JavaScript injected through a third-party vendor led users to approve fraudulent transactions. Blockchain firms estimate losses at about $3 million; Polymarket says its backend was unaffected.
Key points
- Polymarket says it will fully reimburse customers affected by the incident.
- A malicious script was injected into the website frontend through a third-party vendor compromise, according to Polymarket.
- Users were tricked into approving fraudulent transactions; Polymarket said its servers and backend infrastructure were not affected.
- Blockchain intelligence firms estimate losses at roughly $3 million, involving a small number of accounts.
- PeckShield said stolen funds were bridged from Polygon to Ethereum and swapped for about 1,893 Ether.
- Bubblemaps said fewer than 15 accounts were affected.
Article Details
- Victim Organization
- Polymarket
- Incident Type
- Supply-chain attack involving malicious JavaScript injected into the Polymarket frontend through a compromised third-party vendor; users were tricked into approving fraudulent transactions.
- Affected Records
- Less than 15 accounts, according to Bubblemaps.
- Operational Impact
- Independent estimates put the stolen funds at approximately $3 million worth of ParyonUSD, later swapped for approximately 1,893 Ether. Polymarket said its servers and backend infrastructure were not impacted and that it would fully reimburse affected customers.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed
Products
Industries
CryptocurrencyPolymarket is one of the world’s largest cryptocurrency-based prediction markets that allows users to trade contracts with prices that reflect the market’s collective estimate of an event’s outcome.Prediction marketsPolymarket is one of the world’s largest cryptocurrency-based prediction markets that allows users to trade contracts with prices that reflect the market’s collective estimate of an event’s outcome.