# Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

> **Open Intelligence Dossier** · First detected: 2026-11-01 15:40 UTC · Category: Business

## Executive Summary
Polymarket traders lost approximately $2.7 million after hackers hijacked a third-party DebugBear script to drain user wallets.

## Intelligence Brief
Hackers successfully stole about $2.7 million from traders using the Polymarket platform. The theft was executed through the hijacking of a third-party script provided by DebugBear. According to reports, the attackers integrated wallet-draining code into this script, which allowed them to target users of the prediction market. The incident occurred as part of a broader series of crypto security scares that impacted the platform's user base. Coverage of the breach is being reported by several specialized and mainstream outlets.


The Hacker News explicitly detailed the amount stolen and the specific role of the DebugBear script in the attack. InfoStealers provided a breach alert focusing on the discovery of the wallet-draining code within the third-party script. Additionally, Yahoo Finance reported on the aftermath of the event, noting that Bitcoin prices held near $78,000 over the weekend as the security situation unfolded. This event is significant because it demonstrates how vulnerabilities in third-party service providers, such as DebugBear, can be leveraged to compromise the security of a primary platform like Polymarket. By compromising a script that the platform relies on, hackers were able to bypass primary defenses to reach trader wallets directly.


The scale of the loss, totaling roughly $2.7 million, highlights the financial risks associated with integrated third-party dependencies in the cryptocurrency and decentralized finance sectors. Following the attack, Polymarket has taken steps to mitigate the loss for its users. Yahoo Finance reports that Polymarket is currently refunding the victims of the hack. Observers will be monitoring the completion of these refunds and whether further vulnerabilities are discovered in other third-party scripts used by the platform. Coverage does not yet specify if legal action or further investigations into DebugBear are underway, but the focus remains on the restoration of funds to the affected traders.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| Yahoo Finance | Bitcoin Holds Near $78K Over Weekend As Polymarket Refunds Hack Victims After Crypto Security Scares | [Source Link](https://news.google.com/rss/articles/CBMilwFBVV95cUxOUXZfQjlDaHRWaTN4cEdjQXZ1SmxrQm5mU3dmRURHSUJGNmJMd04ta3E0VmFRNzY3NFYwbUdYLS1HdXdsUnEzbXVMV0l1Y1hJbEhvakpQZkpxMkRZOTFnV1g4a1dDNi1pYW8tb0RENThoemZZZS1yaDBGWjA4Q2lPb05TdENrb0tFR2xpdHZWS0J4OWlIMHIw?oc=5) |
| InfoStealers | Polymarket Breach Alert: Wallet-Draining Code Found in a Third-Party Script | [Source Link](https://news.google.com/rss/articles/CBMisgFBVV95cUxPRUJWdXN4bnEwbUpDNDFrTWZlc3NjaFNObW4ySFNxUUxQa0F6RkZDUzBjSUQ0R3l6YzhYeERsRTFCTVp5WWtZd1pXZ3hOU3dGLWU5U20weFlQM3YyYXloQl80MENvbUNpMFVNX0Ntc0lXRklLR2JpWmU4Vk5wMkd5emEtVE9SSnpfTGQyMTJaa0I1QWZCeTItVXY5VVB0cTZsSDVoZnQyODdiTVFYOUZreTNB?oc=5) |
| The Hacker News | Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE9pdkJSNjJ2ZnRLcDQxMy1jT3RybjhvU1RrNjFTVmhZWko4Zno4eVVCUlk1dmxQQU5takFhaEdxbEprUzFhV2VPT29oRjNsZjdnYWpfMjZ1cUFXTHpSR2NVZWU1Rkg4ZFRHVGltNnJ4S2ZpUC11UU5MU0JPNk9qWW8?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-11-01/hackers-steal-about-2-7-million-from-polymarket-traders-via-hijacked-debugbear*