javascript —

Polymarket halts trading after crypto-draining script breach, $2.5M traced

Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with about $2.5 million in assets traced to a suspected attacker wallet.

Polymarket halts trading after crypto-draining script breach, $2.5M traced

The company confirmed the security incident, saying it had identified and fixed the issue affecting its international platform, Polymarket.com, and referred the breach to law enforcement. "One of our third party providers was compromised, and we have referred this to relevant law enforcement," Polymarket said.

"Anyone who has been impacted will be made whole. Out of an abundance of caution, we have temporarily halted trading and are working to bring the platform back online."

Polymarket initially placed its exchange into cancel-only mode at 2:05 p.m. ET and paused relayer actions while investigating the incident. At 2:37 p.m., the company unveiled that the issue had been fixed and that trading was temporarily halted out of an abundance of caution.

Earlier coverage

javascriptsecurity

Related coverage

Elsewhere in this edition