CYBERSECURITYTRACKER
Permanent story citation

Polymarket halts trading after crypto-draining script breach, $2.5M traced

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11819

As cited

Copy frozen at (site build).

breaches incidents

Polymarket halts trading after crypto-draining script breach, $2.5M traced

Polymarket, a prediction market platform, halted trading after attackers exploited a third-party service to inject malicious JavaScript that drained user cryptocurrency. Approximately $2.5 million in assets were traced to a suspected attacker wallet.

Why it matters: Polymarket users and any organization relying on third-party service dependencies face immediate exposure to supply-chain compromise attacks; practitioners should review their third-party code and script-loading controls to prevent similar JavaScript injection attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

Polymarket halts trading after crypto-draining script breach, $2.5M traced

Polymarket, a prediction market platform, halted trading after attackers exploited a third-party service to inject malicious JavaScript that drained user cryptocurrency. Approximately $2.5 million in assets were traced to a suspected attacker wallet.

Why it matters: Polymarket users and any organization relying on third-party service dependencies face immediate exposure to supply-chain compromise attacks; practitioners should review their third-party code and script-loading controls to prevent similar JavaScript injection attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary