Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnAISquareMore
Polymarket to reimburse users after third-party compromise triggers $3M phishing attack

Polymarket to reimburse users after third-party compromise triggers $3M phishing attack

AMBCryptoAMBCrypto2026/06/25 18:04
By:AMBCrypto

Prediction market platform Polymarket says it will fully reimburse affected users after a compromised third-party vendor injected malicious code into its frontend. This exposed some users to a phishing attack that blockchain security researchers estimate drained nearly

$3 million
.

In a statement published on

June 25
, Polymarket said it discovered the compromised vendor earlier in the day, removed the affected dependency, and contained the incident. The company added that it is contacting impacted users and will refund them in full.

The incident appears to have affected only users who interacted with the compromised frontend during the attack window rather than the platform’s underlying smart contracts.

@media only screen and (min-width: 0px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 50px; transition: min-height 0.3s ease; } } @media only screen and (min-width: 640px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 90px; } }
AD

Third-party compromise injected malicious script

According to Polymarket, the attack originated from a compromised third-party vendor that injected a malicious script into parts of the platform’s frontend.

The company said it has since removed the affected dependency and contained the incident. However, it has not disclosed the identity of the compromised vendor or released a detailed technical postmortem.

The platform emphasized that it is working directly with affected users while continuing its investigation.

Security firms estimate nearly $3M in losses

Blockchain security firm PeckShield reported that the incident appeared to be a phishing campaign targeting Polymarket users.

According to their findings, attackers drained approximately

$3 million worth of PUSD
from more than
11 victim wallets
before bridging the stolen funds from Polygon to Ethereum.

The researchers said the attacker subsequently exchanged the proceeds for roughly

1,893 ETH
, consolidating the assets into a monitored Ethereum address.

Polymarket has not publicly confirmed the estimated losses or the number of affected wallets.

Platform promises full reimbursement

Unlike many phishing incidents that leave users responsible for losses, Polymarket said it intends to reimburse everyone affected by the attack.

The company said it is contacting impacted users directly while continuing to investigate the compromise.

No timeline has been provided for either the reimbursement process or the publication of a full incident report.

Final Summary

  • Polymarket says a compromised third-party vendor injected malicious code into its frontend and has pledged to reimburse affected users.
  • Security researchers estimate the phishing campaign stole roughly $3 million before the funds were bridged to Ethereum and converted into ETH.

 

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

Report: TSMC to Raise Wafer Foundry Prices by 3% to 6% Starting January Next Year, Order Visibility Extended to 2030

According to media reports, TSMC's advanced and high-priced processes such as 2nm and 3nm have seen the largest price increases; mature and specialty processes are subject to individual negotiation based on products, capacity utilization, and customer conditions. Currently, TSMC's 8-inch fabs have a capacity utilization rate exceeding 100%, and processes below 45nm are at full capacity. The construction of AI data centers is not only driving demand for GPU and HBM, but also boosting orders for mature processes such as PMIC, MCU, and analog ICs.

华尔街见闻2026/09/23 20:36

U.S. Treasury plans to repurchase up to $6 billion in long-term bonds, 30-year yield hits highest since 2007

This is the second round of enhanced long-term bond buybacks by the Treasury, this time focusing on 20- to 30-year government bonds. After the announcement of the planned upper limit, the yield on 30-year U.S. Treasury bonds continued to rise, at one point exceeding 5.4%. In the first round of enhanced buybacks two weeks ago, the upper buyback target was also $6 billion, which was lower than some market participants had expected, and the actual buyback amounted to only $5.2 billion due to insufficient competitive bidding, according to the Treasury.

华尔街见闻2026/09/23 20:36