HACKERS STEAL ABOUT $2.7 MILLION FROM POLYMARKET TRADERS VIA HIJACKED DEBUGBEAR SCRIPT

Summary from the TLDR InfoSec newsletter

A hijacked DebugBear script on Polymarket's site used signed-in traders' browser sessions to sell or transfer their positions on October 29. Attackers received about $2.64 million in POL from 33 wallets within 52 minutes. Polymarket is refunding $3.9 million, including $2.7 million to 726 affected wallets. The compromise began through DebugBear's domain registrar.