negativeSYS.SOURCE: The Hacker News• 2026-11-01T12:55:40+05:30

Polymarket Prediction Market Suffers $2.7M Theft via Compromised DebugBear Script

#crypto #vulnerability #security breach

Hackers exploited a compromised third-party script to steal $2.7 million from Polymarket traders by manipulating signed-in users' positions. The prediction market platform is refunding affected wallets, with blockchain records confirming $2.64 million in crypto moved to attackers.

Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company.

Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about $2.64 million reached

Read original article

*** END OF TRANSMISSION ***

> NORWAY'S SCENIC ROUTES AND AWARD-WINNING PUBLIC TOILETS > UNICODE-BASED DOMAIN NAME SPOOFING TECHNIQUES > PACIFIC ISLAND NATION IMPLEMENTS UNIVERSAL BASIC INCOME PILOT PROGRAM > CRITICAL LXD AND MICROCLOUD VULNERABILITY ALLOWS UNAUTHORIZED IMPERSONATION VIA PUBLIC CERTIFICATES > POLYMARKET PREDICTION MARKET SUFFERS $2.7M THEFT VIA COMPROMISED DEBUGBEAR SCRIPT > FBI ATTRIBUTES $6.43 BILLION BINANCE CRYPTO HEIST TO NORTH KOREA'S TRADERTRAITOR GROUP > ADVANCED NETAMLOADER MALWARE EXPLOITS CUSTOM WINDOWS 10 BUILDS IN ASIAN GOVERNMENT NETWORKS > GOOGLE'S PAC-MAN DOODLE AUTOPLAY SOUND INCIDENT > AI-DRIVEN DEVELOPMENT COSTS IN JAVASCRIPT FRAMEWORKS > DATA CENTERS AND AI EMERGE AS KEY MIDTERM ELECTION ISSUES IN BROOKLYN> NORWAY'S SCENIC ROUTES AND AWARD-WINNING PUBLIC TOILETS > UNICODE-BASED DOMAIN NAME SPOOFING TECHNIQUES > PACIFIC ISLAND NATION IMPLEMENTS UNIVERSAL BASIC INCOME PILOT PROGRAM > CRITICAL LXD AND MICROCLOUD VULNERABILITY ALLOWS UNAUTHORIZED IMPERSONATION VIA PUBLIC CERTIFICATES > POLYMARKET PREDICTION MARKET SUFFERS $2.7M THEFT VIA COMPROMISED DEBUGBEAR SCRIPT > FBI ATTRIBUTES $6.43 BILLION BINANCE CRYPTO HEIST TO NORTH KOREA'S TRADERTRAITOR GROUP > ADVANCED NETAMLOADER MALWARE EXPLOITS CUSTOM WINDOWS 10 BUILDS IN ASIAN GOVERNMENT NETWORKS > GOOGLE'S PAC-MAN DOODLE AUTOPLAY SOUND INCIDENT > AI-DRIVEN DEVELOPMENT COSTS IN JAVASCRIPT FRAMEWORKS > DATA CENTERS AND AI EMERGE AS KEY MIDTERM ELECTION ISSUES IN BROOKLYN