Hacking News
Polymarket Suspected of Security Incident
Polymarket, a prediction market, has restricted trading and paused relayer actions due to reports of funds being withdrawn from accounts without permission. Users are advised to lock down their accounts as the platform’s trading API is in a major outage and the exchange is in cancel-only mode. A suspected attacker wallet, holding about $2.65 million in POL (Polygon’s native token), has been identified. Researchers found a script loaded from DebugBear attempting to sell users' positions and transfer assets, with the same wallet address hard-coded in the script as its fallback recipient. The company has referred the matter to law enforcement and is working to make affected users whole.