
Polymarket Returns $3.9 Million to Traders After DNS Hijack
Polymarket returns $3.9 million to traders after a DNS compromise at DebugBear enabled malicious JavaScript to steal assets from logged-in sessions.
7 stories, newest first · one card per story

Polymarket returns $3.9 million to traders after a DNS compromise at DebugBear enabled malicious JavaScript to steal assets from logged-in sessions.

Attackers hijacked .gh, .sl, and .as DNS, obtaining unauthorized certificates for Google and other organizations' domains.

Attackers hijacked .gh, .sl, and .as DNS to get certificates impersonating Google and others.

Attackers hijacked the .gh, .sl, and .as registries and obtained unauthorized certificates covering Google domains.

Attackers hijacked the .gh, .sl, and .as registries and obtained later-revoked HTTPS certificates for Google and YouTube domains.

Attackers hijacked .gh, .sl, and .as registries, issuing unauthorized certificates for Google and other brands.

Attackers with Brevo DNS access injected malicious scripts serving ClickFix malware and WordPress backdoors to over 100,000 customer sites on 14 September 2026.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views