Polymarket Users Lose $2.7 Million in Third-Party Script Hack

Polymarket briefly halted trading after attackers replaced a DebugBear real-user monitoring script on Polymarket.com with malicious code that used active user sessions to sell positions and drain funds, resulting in about $2.7M stolen from roughly 710 wallets; Polymarket removed the script, paused trading, reset sessions, and pledged $3.9M in refunds while referring the incident to UK law enforcement.