Prediction market platform Polymarket will fully refund users after a third-party vendor compromise allowed hackers to inject malicious code, leading to an estimated $2.94 million theft from at least 11 user wallets.
The incident highlights ongoing security vulnerabilities in the crypto space, particularly concerning third-party vendor risks, and underscores Polymarket's need to bolster its defenses after a recent breach.
Polymarket is set to refund users after a security exploit, stemming from a compromised third-party vendor, resulted in the theft of approximately $2.94 million. The attack allowed hackers to inject malicious code into the prediction market's front-end, impacting at least 11 user accounts. Polymarket has stated that the frontend issue has been resolved and all affected customers will be fully reimbursed. This incident follows a previous hack last month where a company wallet was compromised, leading to a loss of roughly $600,000.