Polymarket Returns $3.9 Million to Traders After DNS Hijack
Original title: Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Polymarket returns $3.9 million to traders after a DNS compromise at DebugBear enabled malicious JavaScript to steal assets from logged-in sessions.
Prediction market Polymarket halted trading on October 29 after users reported unauthorized withdrawals. DebugBear disclosed its DNS records were compromised by attackers who injected malicious JavaScript into the Polymarket site. The script checked portfolios and either dumped positions or transferred assets to attacker wallets using open browser sessions. Polymarket has now paid out $3.9 million across approximately 5,500 wallets and is investigating with law enforcement while removing the compromised provider.
Unconfirmed: The specific third-party provider name is not disclosed by DebugBear
- 726 wallets affected, 37 still pending payment as of October 30
- Total payouts reach $3.9 million including $1.19 million for halt-related losses
- Similar incident in June resulted in roughly $3 million stolen
- DebugBear found no evidence of direct password or seed phrase theft
- Polymarket removed the third-party provider within one hour
Impact: Theft of $3.9 million from trader accounts via malicious JavaScript on logged-in sessions
| Product | Affected |
|---|---|
| Polymarket prediction market platform | — |
- 1.Remove embedded Real User Monitoring script from website
- 2.Replace compromised third-party DNS provider
- 3.Cooperate with law enforcement in ongoing investigation
- Vendors
- PolymarketDebugBear
- Malware
- malicious JavaScript
- Victims
- Polymarket traders
From the original article
2 min read at securityweek.com
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted. The post Polymarket Returns $3. 9 Million to Traders as DebugBear Cites DNS Hijack appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.