Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Polymarket Supply Chain Attack: $3.10M Reported Loss

·Historical incident record

Incident Overview

Polymarket suffered a third-party supply chain attack where hackers injected a malicious script into the platform's frontend, draining approximately $3.1 million in PUSD from 11 user wallets. Funds were moved from Polygon to Ethereum. Polymarket contained the incident, removed the affected dependency, and promised full refunds to impacted users.

Sources & References

Original incident referencehttps://x.com/polymarkettrade/status/2070155882906730671?s=46&t=DLwbX9Nw4QECiyZQ0av-fg (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 573,200
  2. Incident date
    Attack methodPhishing attack
    Reported loss$ 500,000
  3. Incident date
    Attack methodPrivate Key Leakage
    Reported loss$ 1,700,000
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 12,300
  5. Incident date
    Target

    Yield Yak

    Attack methodFrontend Attack
    Reported lossNot disclosed