710 Polymarket wallets were drained of $2.7M by code served from DebugBear. Pull the snippet from your sites.

A hijacked DebugBear script drained about $2.7 million from Polymarket traders, affecting 726 wallets and triggering $3.9 million in refunds.

Stolen ConnectWise creds reached 162 M365 tenants, LiteLLM 1.107.0 shipped credential-stealing malware, and DebugBear code drained $2.7M from Polymarket.

A hijacked DebugBear page-speed script injected malicious code into Polymarket, redirecting signed-in traders’ positions and funds. Blockchain tracing…

Attackers rewrote a performance-monitoring script on the prediction market, abusing logged-in trading sessions to sell positions and steal crypto millions.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted. The post Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack appeared first on SecurityWeek.

Polymarket is returning $3.9 million to traders after a supply chain attack, as DebugBear reports a DNS compromise through its registrar.

A hijacked DebugBear script drained about $2.7 million from Polymarket traders, affecting 726 wallets and triggering $3.9 million in refunds.

Introduction: A Third-Party Script Becomes a Financial Security Threat A compromise involving a third-party website performance monitoring script has reportedly exposed Polymarket traders to financial losses, demonstrating how trusted external JavaScript dependencies can become an attack vector against major online platforms. The incident reportedly involved a hijacked DebugBear page-speed monitoring script that injected malicious code into Polymarket. The injected code allegedly targeted authenticated traders, redirecting their positions and funds.

Malicious code on Polymarket‘s site, loaded via a compromised DebugBear script, drained funds from signed-in traders on October 29. Hackers […]

Haz clic para acceder al contenido completo.

El robo a Polymarket no entró por la puerta grande. Entró por un script de DebugBear, un fragmento de código de monitoreo que la plataforma cargaba en su propia página, y con las sesiones abiertas de los usuarios vació cuentas durante la tarde del 29 de octubre. La plataforma internacional paró las operaciones cerca de una hora y prometió devolver el dinero a cada afectado. Polymarket es un mercado de predicciones: la gente apuesta dinero a resultados de elecciones, deportes o economía, y opera con una cuenta conectada a su billetera de criptomonedas.

“We’ll make this right and are fully reimbursing all affected traders,” the company said in a post after trading resumed.