A targeted breach forced prediction market giant Polymarket to temporarily suspend platform operations on Thursday after hackers leveraged a third-party engineering flaw to drain at least $2.6 million from user accounts. The incident unfolded within minutes on the exchange’s international platform as traders began reporting unauthorised withdrawals and sudden balance liquidations. Affected users saw their funds rapidly moved out of active balances, with individual losses reaching up to $800,000 in single instances. Blockchain records and security research firm Hudson Rock indicated that the breach stemmed from a compromised web monitoring script provided by DebugBear, a UK-based third-party developer.Attackers compromised the script embedded in Polymarket’s frontend, executing unauthorised code designed to scrape active user trading sessions, liquidate open holdings, and route converted digital assets directly into attacker-controlled wallets. Will digital currencies be safe ?
