Key facts
- Polymarket will refund users after a security exploit resulted in the theft of approximately $2.94 million.
- Hackers injected a malicious script into the platform's frontend via a compromised third-party vendor.
- At least 11 user wallets were affected by the phishing attack.
- Polymarket has contained the breach and removed the affected dependency.
- This marks the platform's second security incident in two months.
