InfoSecBulletin Cybersecurity for mankind
Polymarket is a platform for prediction markets using cryptocurrency. It lets users bet on what might happen in real-life events like elections, economic data, sports, and cultural events.
The company has shared little information about the incident.
Urgent patch! Cisco and IMB patch multiple flaws
OWASP Unveils GenAI LLM Top 10 2026 For Modern AI APPS
Greatness PhaaS Evades Email Security and MFA to Take Over Microsoft 365 Accounts
Pillar 4: Total 131 Indicators Set
How Bangladeshi’s Ogrs Be Evaluated By Newly Launched NRS & CIRS
Brazilian health surveillance platform breach exposes 100K+ sensitive documents
Thousands of data centers are at risk of compromise due to a 22-year-old flaw
Bangladesh Launches (CIRS) and National ICT & Cyber Security Rating System (NRS)
CVE-2026-18574
Check Point Authentication Bypass Hits Management Server
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it & removed the affected dependency,” Polymarket said in a Thursday post on X.
It said that affected users will be reached out to and given back their money, but it didn’t say how many users were hurt and how much cryptocurrency was taken.
Blockchain security company PeckShield reported that roughly $3 million worth of pUSD, Polymarket’s USDC-backed trading currency, was stolen via a phishing campaign.
“The attacker bridged the stolen funds from Polygon to Ethereum and swapped them into ~1,893 ETH,” PeckShield said.
A blockchain expert said that the losses are reportedly about $3 million, with money taken from at least 11 people. It is not known who did the attack.
Related news:
Anthropic Confirms US Infrastructure Redeployment of Claude Mythos 5
