Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnAISquareMore
Polymarket to reimburse users after third-party compromise triggers $3M phishing attack

Polymarket to reimburse users after third-party compromise triggers $3M phishing attack

AMBCryptoAMBCrypto2026/06/25 18:04
By:AMBCrypto

Prediction market platform Polymarket says it will fully reimburse affected users after a compromised third-party vendor injected malicious code into its frontend. This exposed some users to a phishing attack that blockchain security researchers estimate drained nearly

$3 million
.

In a statement published on

June 25
, Polymarket said it discovered the compromised vendor earlier in the day, removed the affected dependency, and contained the incident. The company added that it is contacting impacted users and will refund them in full.

The incident appears to have affected only users who interacted with the compromised frontend during the attack window rather than the platform’s underlying smart contracts.

@media only screen and (min-width: 0px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 50px; transition: min-height 0.3s ease; } } @media only screen and (min-width: 640px) and (min-height: 0px) { div[id^="bsa-zone_1774359638628-7_123456"] { min-height: 90px; } }
AD

Third-party compromise injected malicious script

According to Polymarket, the attack originated from a compromised third-party vendor that injected a malicious script into parts of the platform’s frontend.

The company said it has since removed the affected dependency and contained the incident. However, it has not disclosed the identity of the compromised vendor or released a detailed technical postmortem.

The platform emphasized that it is working directly with affected users while continuing its investigation.

Security firms estimate nearly $3M in losses

Blockchain security firm PeckShield reported that the incident appeared to be a phishing campaign targeting Polymarket users.

According to their findings, attackers drained approximately

$3 million worth of PUSD
from more than
11 victim wallets
before bridging the stolen funds from Polygon to Ethereum.

The researchers said the attacker subsequently exchanged the proceeds for roughly

1,893 ETH
, consolidating the assets into a monitored Ethereum address.

Polymarket has not publicly confirmed the estimated losses or the number of affected wallets.

Platform promises full reimbursement

Unlike many phishing incidents that leave users responsible for losses, Polymarket said it intends to reimburse everyone affected by the attack.

The company said it is contacting impacted users directly while continuing to investigate the compromise.

No timeline has been provided for either the reimbursement process or the publication of a full incident report.

Final Summary

  • Polymarket says a compromised third-party vendor injected malicious code into its frontend and has pledged to reimburse affected users.
  • Security researchers estimate the phishing campaign stole roughly $3 million before the funds were bridged to Ethereum and converted into ETH.

 

0
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now!

You may also like

Paramount SkyDance (PSKY.US) Nears Settlement Agreement to Advance $110 Billion Warner Acquisition, But Some State Attorneys General Still Withhold Support

According to reports, Paramount is engaged in in-depth negotiations with state attorneys general to facilitate the completion of its $110 billion acquisition of Warner Bros. Discovery; however, not all state attorneys general support this plan.

智通财经2026/09/21 02:56

More Hawkish Than Market Consensus! JPMorgan: South Korea Interest Rates Targeted at 3.75%, Terminal Rate ‘Ceiling’ Undetermined

JPMorgan believes that if semiconductor-driven growth triggers stronger inflation and credit and financial markets remain stable, its already above-market-consensus forecast for South Korea's interest rates will face upside risks.

智通财经2026/09/21 02:31

Ackman "Switches Holdings" to AI Giants: Sells All Alphabet (GOOGL.US) Shares, Increases Meta (META.US) Holdings—Should Investors Follow?

Ackman made it clear that this is not a bearish outlook on Alphabet, but rather a decision to shift funds to other, more attractive opportunities given the current valuation.

智通财经2026/09/21 01:56