Polymarket Users Suffer $3 Million Loss in Third

Polymarket users incurred approximately $3 million in losses following a supply-chain attack that compromised the platform’s frontend interface. The breach occurred when hackers injected malicious JavaScript through a third-party vendor dependency, enabling the execution of fraudulent transactions. While the platform’s backend infrastructure remained secure, the incident resulted in the unauthorized transfer of funds from a limited number of user accounts.

Blockchain analysis indicates the stolen assets were converted into 1,893 Ether and bridged across networks to obfuscate the trail. The platform has committed to full reimbursement for all affected users. This event highlights systemic risks associated with third-party software dependencies in decentralized finance applications.

Security audits suggest fewer than 15 accounts were directly impacted by the phishing campaign. The incident underscores the vulnerability of frontend interfaces to supply-chain compromises, even when core backend systems maintain integrity. Institutional stakeholders should evaluate the security protocols of third-party vendors integrated into their digital service delivery chains to mitigate similar exposure.