Polymarket halted trading after malicious code appeared in a vendor script
The exchange said a third-party provider was compromised and affected users would be made whole; researchers found malicious code in a file associated with the provider.
By Ryan Merket · Published · Updated
Primary source: x.com
Why it matters
The incident shows how a compromised third-party script can reach the trading and signing tools available inside an authenticated financial app.
Polymarket temporarily halted trading today after a third-party provider was compromised, according to the exchange's incident notice. Security researchers found malicious code in a JavaScript file associated with DebugBear, a performance-monitoring service, that was designed to act on users' trading sessions.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.