Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Malicious code replaced a third-party DebugBear page-speed script on the Polymarket website. On October 29, the code sold positions belonging to some signed-in traders and moved funds to the hackers' wallet. Polymarket said it was refunding about $2.7 million to 726 affected wallets.
CERT24