Polymarket says it will refund traders after malicious script incident

Crime · First reported 30 Oct, 09:41 · Updated 09:48

Image: Wikimedia Commons · NASA Earth Observatory image by Lauren Dauphin, using Landsat data from the U.S. Geological Survey. Story by Adam Voiland. · Public domain

Malicious code served through a compromised DebugBear-related script targeted signed-in Polymarket traders on October 29. Polymarket says it is refunding affected users and has taken steps to secure the site.

The malicious script replaced a page-speed script loaded from an outside company and used access within logged-in Polymarket pages to move or sell traders’ positions.
Polymarket said it was refunding about $2.7 million to 726 affected wallets; it also said it would return $3.9 million in total, including payments to other traders affected by the trading pause or position losses.
Polymarket paused trading, cleared caches and active login sessions, and referred the incident to law enforcement. DebugBear told customers using its monitoring tool to remove its embed code.

Summary written by Lux AI from 2 articles

Key facts

Incident date: October 29
Affected wallets: 726
Refunds for affected wallets: About $2.7 million
Total amount Polymarket says it is returning: $3.9 million
Funds received by the hackers’ wallet: About $2.64 million in crypto, according to the article’s account of blockchain records