The prediction market platform Polymarket has reported a security breach on June 25, where a third-party provider of one of its frontend components was hacked. This incident resulted in some users encountering a malicious script on the platform.
The first to notify about the incident was analyst Specter, who assessed that the phishing attack impacted at least 11 wallets holding the stablecoin PUSD, with damages estimated at around $2.94 million.
According to PeckShield, the attacker transferred the stolen funds from the Polygon network to Ethereum and exchanged them for 1,893 ETH, valued at approximately $3 million. Polymarket has stated that they have localized the incident, removed the affected component, and are in the process of contacting the victims to facilitate the return of their funds.