Polymarket
Disclosed Jun 25, 20263 months agoUnverified
Polymarket users lose $3 million after vendor script injected into frontend
Polymarket said attackers compromised a third-party frontend vendor and injected malicious JavaScript that tricked fewer than 15 users into approving fraudulent transactions, stealing about $3 million. It pledged full reimbursement.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 25, 2026 |
| Attack | Supply chain |
| Data exposed | Financial |
| Sector | Crypto · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Polymarket says hackers stole users' fundstechcrunch.com · News | News |
| Polymarket customers lose $3 million in supply-chain attackbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 25 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.