Live Feeds
● LIVE Updated 1h ago · 12 sources tracked

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

Polymarket is refunding approximately $2.7 million to 726 affected wallets after hackers used a compromised third-party script to drain funds on October 29. Attackers hijacked DebugBear DNS records through a domain registrar to replace a page-speed monitoring script with malicious code. This code leveraged existing sessions of signed-in traders to sell positions and transfer funds without needing stolen keys. Polymarket halted international trading following the breach, though its U.S. platform remained unaffected. Blockchain records indicate attackers received about $2.64 million in under one hour.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (12)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ Hackers stole approximately $2.7 million from Polymarket traders on October 29.
  • ✓ The attack targeted 726 affected wallets.
  • ✓ Malicious code replaced a page-speed script from the vendor DebugBear.
  • ✓ Blockchain records show about $2.64 million reached the hackers wallet in under an hour.
🛡️ Source Corroboration: 12 independent reporting domains (95% confidence) ⏱ Read time: ~2 min

What changed

Details emerged regarding the DNS hijack of DebugBear and the specific number of impacted wallets.

Live updates

  1. Polymarket Traders Lose $2.7 Million via Hijacked DebugBear Script

    Polymarket is refunding approximately $2.7 million to 726 affected wallets after hackers used a compromised third-party script to drain funds on October 29. Attackers hijacked DebugBear DNS records through a domain registrar to replace a page-speed monitoring script with malicious code. This code leveraged existing sessions of signed-in traders to sell positions and transfer funds without needing stolen keys. Polymarket halted international trading following the breach, though its U.S. platform remained unaffected. Blockchain records indicate attackers received about $2.64 million in under one hour.

    Why it matters

    The attack highlights the risk of third-party vendor dependencies in decentralized finance. By compromising a Real User Monitoring tool, attackers bypassed traditional security to access user sessions. This event is described as one of two major breaches for the platform in 2026.

    What is confirmed

    • Hackers stole approximately $2.7 million from Polymarket traders on October 29.
    • The attack targeted 726 affected wallets.
    • Malicious code replaced a page-speed script from the vendor DebugBear.
    • Blockchain records show about $2.64 million reached the hackers wallet in under an hour.
    • Polymarket halted international trading after the compromise.
    • The platform is refunding impacted users.
    • Attackers compromised DebugBear DNS records via its domain registrar.

    Still unconfirmed

    • The breach affected 710 wallets rather than 726.
    • The U.S. platform was not affected by the breach.

    What to watch next

    • Evidence of further DNS compromises at other DebugBear clients
    • Confirmation of the total amount successfully refunded to all 726 wallets
    Sources used for this update (13)
    1. NBC News — Polymarket trading halted after vendor compromise; impacted users will be ‘made whole’
    2. WIRED — Polymarket Halted International Trading After Hackers Drained Accounts
    3. WSJ — Hackers Swipe Millions From Polymarket Users in Latest Security Breach
    4. WSJ — The Morning Risk Report: Binance and Polymarket Suspend Trading After Hacks
    5. thehackernews.com — Hackers Steal About $2.7 Million From Polymarket Traders via ...
    6. The Hacker News — Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
    7. InfoStealers — Polymarket Breach Alert: Wallet-Draining Code Found in a Third-Party Script
    8. Yahoo Finance — Bitcoin Holds Near $78K Over Weekend As Polymarket Refunds Hack Victims After Crypto Security Scares
    9. news.lavx.hu — Hackers steal $2.7 million from Polymarket traders via ...
    10. threat-intelligence.redeyesecurity.com — Hijacked DebugBear Script Costs Polymarket Traders About $2.7 ...
    11. www.reflectiz.com — Polymarket Hack: DebugBear Script Drained $2.7M - Reflectiz
    12. www.sofx.com — Polymarket Vendor Script Hack Drains $2.7 Million in Second ...
    confidence 95%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community