InfoSecBulletin Cybersecurity for mankind
Polymarket is a platform for prediction markets using cryptocurrency. It lets users bet on what might happen in real-life events like elections, economic data, sports, and cultural events.
The company has shared little information about the incident.
Windows LegacyHive 0, AWS, Fortinet, TP-LINK multiple flaws got hackers attention
CVE-2026-53412
Zoom Warns of critical account takeover Flaw via Network Access
India to built Mythos-like AI model “Sarvam AI” and “BharatGen” assigned
Cursor, SonicWall, SharePoint 0-day exploited to the wild
Microsoft Patch Tuesday July-2026 fixes 570 flaws, 3 zero-days
Fortinet Patches 7 Flaws In FortiOS, FortiProxy, FortiPAM, and FortiSandbox
CISA warns Cisco IOS flaw, while VMware flaw allows bypassing authentication
Meta’s louisiana data center to exceed 250 billion price tag
Ransomware Crisis in 2026: 5,064 Organizations Affected in 135 Countries
Palo Alto Networks Addresses 13 Vulnerabilities
“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it & removed the affected dependency,” Polymarket said in a Thursday post on X.
It said that affected users will be reached out to and given back their money, but it didn’t say how many users were hurt and how much cryptocurrency was taken.
Blockchain security company PeckShield reported that roughly $3 million worth of pUSD, Polymarket’s USDC-backed trading currency, was stolen via a phishing campaign.
“The attacker bridged the stolen funds from Polygon to Ethereum and swapped them into ~1,893 ETH,” PeckShield said.
A blockchain expert said that the losses are reportedly about $3 million, with money taken from at least 11 people. It is not known who did the attack.
Related news:
Anthropic Confirms US Infrastructure Redeployment of Claude Mythos 5
