Polymarket customers lose $3 million in supply-chain attack

Polymarket suffered a supply-chain attack after a third-party frontend dependency was compromised and malicious JavaScript was injected into the site, tricking users into approving fraudulent transactions and resulting in an estimated $3 million theft from under 15 accounts; Polymarket’s backend systems were not affected and attackers bridged and swapped the stolen funds into ETH.