Polymarket breached via third-party vendor, approximately $3 million in user funds stolen

CoinFeed June 26 news, according to Decrypt, prediction market platform Polymarket was breached via a third-party vendor, resulting in malicious code being injected into the website frontend, and around 15 user accounts had approximately $3 million in funds stolen. Polymarket said the issue has been resolved, and affected users will be fully compensated, but did not disclose the specific vendor name. The stolen funds were originally the platform's dollar-pegged stablecoin pUSD, which the attacker exchanged for ETH and then consolidated into a wallet address. This attack is Polymarket's second security incident in nearly two months. Last month, a wallet used by an employee for deposits and paying user rewards was breached due to private key leakage, resulting in about $700,000 stolen.