Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
Polymarket traders lost approximately $2.7 million after hackers hijacked a third-party DebugBear script to drain user wallets.
Velocity
How fast coverage is spreading — measured hourly from article rate × source diversity. How this works →
The brief
Hackers successfully stole about $2.7 million from traders using the Polymarket platform. The theft was executed through the hijacking of a third-party script provided by DebugBear. According to reports, the attackers integrated wallet-draining code into this script, which allowed them to target users of the prediction market. The incident occurred as part of a broader series of crypto security scares that impacted the platform's user base. Coverage of the breach is being reported by several specialized and mainstream outlets.
The Hacker News explicitly detailed the amount stolen and the specific role of the DebugBear script in the attack. InfoStealers provided a breach alert focusing on the discovery of the wallet-draining code within the third-party script. Additionally, Yahoo Finance reported on the aftermath of the event, noting that Bitcoin prices held near $78,000 over the weekend as the security situation unfolded. This event is significant because it demonstrates how vulnerabilities in third-party service providers, such as DebugBear, can be leveraged to compromise the security of a primary platform like Polymarket. By compromising a script that the platform relies on, hackers were able to bypass primary defenses to reach trader wallets directly.
The scale of the loss, totaling roughly $2.7 million, highlights the financial risks associated with integrated third-party dependencies in the cryptocurrency and decentralized finance sectors. Following the attack, Polymarket has taken steps to mitigate the loss for its users. Yahoo Finance reports that Polymarket is currently refunding the victims of the hack. Observers will be monitoring the completion of these refunds and whether further vulnerabilities are discovered in other third-party scripts used by the platform. Coverage does not yet specify if legal action or further investigations into DebugBear are underway, but the focus remains on the restoration of funds to the affected traders.
Synthesized by PULSE from the headlines below under a strict no-invention contract. ✓ fact-checked: all claims supported by sources Updated 12d ago.
Quick answers
How much was stolen from Polymarket traders?
Hackers stole about $2.7 million from the traders.
What was the technical cause of the breach?
The breach occurred via a hijacked DebugBear script that contained wallet-draining code.
Is Polymarket compensating the victims?
Yes, according to Yahoo Finance, Polymarket is refunding hack victims.
Coverage (3)
- Bitcoin Holds Near $78K Over Weekend As Polymarket Refunds Hack Victims After Crypto Security Scares Yahoo Finance · 14d ago
- Polymarket Breach Alert: Wallet-Draining Code Found in a Third-Party Script InfoStealers · 14d ago
- Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script The Hacker News · 14d ago
Topics
Related trends
‘Don't Wait’—Bitcoin Suddenly In Free Fall As Price ‘Collapse’ Fears Trigger Surprise $2 Trillion Crypto Crash
Bitcoin faces intense market pressure and warnings of a severe drop amid a sudden crypto crash.
Fraud Check? Fans slam Bilal Hasan as he loses unbeaten record to Luis Gurule in drab UFC 334 return
Bilal Hasan's unbeaten record falls to Luis Gurule at UFC 334 as fans question the fighter's legitimacy in a lackluster bout.
Could everything be broken? Grounded jets, Microsoft outage, AI chaos make some wonder
A cascade of simultaneous tech failures — FAA ground stops, Microsoft outages, and AI disruption — fuels debate over systemic fragility.
Microsoft outage 'stark reminder' of how much we rely on tech
A massive global Microsoft outage triggers widespread disruptions, sparking urgent warnings from IT experts and officials worldwide.
‘Your government says you can’t use Kalshi anymore:’ Companies react to Louisiana court order
A Louisiana judge issued a temporary restraining order blocking Kalshi, Polymarket, Coinbase, Robinhood and other platforms from operating in the state after Attorney General Liz Murrill sued them for unlicensed gambling.
OpenAI launches security products, tells orgs they’re doomed if they don’t use them
OpenAI launches Daybreak Red Team and Defense Factory security tools while warning organizations they face doom without them.