Polymarket paused trading Oct. 29 after a vendor compromise. Hudson Rock found wallet-draining code in a monitoring script. DebugBear told RUM users to remove its embed.
For admins: audit third-party JS on authenticated pages, remove unneeded embeds and review CSP/SRI. Initial access and total losses remain unverified.
InfoStealersPolymarket Breach Alert: Wallet-Draining Code Found in a Third-Party ScriptA script associated with performance monitoring contains code to access trading sessions, sell positions, and redirect assets. Polymarket’s own production build records the integration’s removal.