Skip to content
securitytabs

Covered by 2 outlets — first reported by The Hacker News, Nov 1, 07:25 UTC

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

Summary

Malicious code on the Polymarket prediction market website sold some signed-in traders' positions and moved their funds to attackers on October 29. The code had replaced a page-speed script the site loaded from an outside company, DebugBear. Polymarket says it is refunding about $2.7 million to 726 affected wallets, while SecurityWeek reports a refund figure of $3.9 million. DebugBear says its DNS records were compromised through its domain registrar and that early findings show a single customer was targeted.

AI summary by the SecurityTabs newsroom, checked against The Hacker News, SecurityWeek. Read the outlets below for the full story.

Continue reading

2 outlets, in the order they reported it.

  1. The Hacker NewsFirst report

    Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

    Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29.

    Read at The Hacker News Details

  2. SecurityWeek

    Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack

    DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.

    Read at SecurityWeek Details

Explained

The technology and terms in this story. Learn more