Polymarket returns $3.9 million to hacked users
Polymarket will refund $3.9 million to affected users after a site compromise, with 95% of wallets refunded in full as of Saturday.
17 stories, newest first · one card per story
Polymarket will refund $3.9 million to affected users after a site compromise, with 95% of wallets refunded in full as of Saturday.

Polymarket returns $3.9 million to traders after a DNS compromise at DebugBear enabled malicious JavaScript to steal assets from logged-in sessions.

Malicious DebugBear script replaced on Polymarket stole $2.64 million from 726 traders; exchange refunding $3.9 million total.

Trading on Polymarket.com resumed after nearly an hour; the US platform was not affected and the company promised reimbursement.

Insikt Group says affiliates get turnkey sites and crypto payouts while operators set each victim’s win chance.

Insikt Group says three Russian-language teams sell fake Polymarket and Kalshi sites; the deposit totals are the operators’ unverified claims.
Blockchain firms allege more than $2.1 million was siphoned; Hudson Rock names DebugBear, which Polymarket has not confirmed.

Trading on the international site paused for about an hour on October 29, and Polymarket says affected users will be reimbursed.

Users report unauthorized withdrawals and zero balances; the provider, loss totals, and access path remain undisclosed.

Hudson Rock says malicious JavaScript from a DebugBear address reused logged-in sessions; $2.7 million across 710 wallets is an outside estimate.

Circle froze about $800 million and Tether about $1.56 billion; watcher estimates of billions stolen are unconfirmed.

Hudson Rock linked a wallet in DebugBear-hosted JavaScript to about 28.6 million POL, roughly $2.57 million.

A UK third-party provider was breached; trading resumed and Polymarket says affected traders will be refunded.
The available Hacker News text shows only 23 points and seven comments, with no incident description.

The 14 counts include 12 for illegal promotion and follow civil suits by several states as the CFTC claims exclusive jurisdiction.

AtlasCore, PolyFucked, and Magnetic Team supply scam sites, panels, and crypto payouts; deposit totals are unverified.
On 802,863 resolved markets, log-volume R² is 0.747, while dispute ranking reaches AUC 0.78 at a 0.31% base rate.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views