The Polymarket Site Was Real. The $3M Theft Was the Code Behind It

Polymarket users lost roughly $3 million after attackers injected malicious JavaScript through a breached third-party frontend vendor, tricking…

What just happened to Polymarket users

Polymarket , one of the world's largest crypto-based prediction markets, confirmed that hackers injected a malicious script into its frontend after breaching a third-party vendor.

Polymarket's servers were never touched

Polymarket says its own servers and backend infrastructure were not impacted.

Why a supply-chain attack is so hard to dodge

Most security advice trains you to spot the fake.

The one habit that would have blunted this

You cannot personally audit a website's third-party vendors.

Get the full story

Read the complete breakdown, fixes and what happens next.