Polymarket confirms third-party compromise after trading outage
Original title: Polymarket confirms cyberattack on third-party provider after outages
Blockchain firms allege more than $2.1 million was siphoned; Hudson Rock names DebugBear, which Polymarket has not confirmed.
Prediction market Polymarket said Thursday outages on its international platform followed compromise of an unnamed third-party provider, which it referred to law enforcement. Trading was halted and later restored, and the company said affected traders would be fully reimbursed. It did not say how much was stolen or by whom. Several blockchain security firms traced alleged losses of more than $2.1 million. Hudson Rock identified the provider as DebugBear and described wallet-draining code; DebugBear said it was hit by an ongoing incident and told customers to remove its embed codes.
Unconfirmed: Polymarket has not named the provider, the attacker or the amount stolen; the $2.1 million figure and DebugBear link come from outside firms.
- Outages began at 2pm EST on Thursday.
- Polymarket removed DebugBear code from its site on Thursday, Hudson Rock said.
- Hudson Rock said evidence does not show a wider compromise of other DebugBear customers.
- DebugBear provides website performance services used via embed codes.
Impact: User cryptocurrency allegedly transferred to an attacker account
| Product | Affected |
|---|---|
| DebugBear website performance embed | — |
- 1.Remove DebugBear embed codes from websites, as DebugBear urged customers to do.
- Vendors
- DebugBear
- Products
- Polymarket
- Victims
- Polymarket
- Organizations
- Hudson Rock
- Countries
- United States
From the original article
2 min read at therecord.mediaThe company suffered outages starting at 2pm EST on Thursday and eventually attributed the downtime to a compromise involving an unnamed provider.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.