InfoSecBulletin Cybersecurity for mankind
Polymarket is a platform for prediction markets using cryptocurrency. It lets users bet on what might happen in real-life events like elections, economic data, sports, and cultural events.
The company has shared little information about the incident.
14,000 Dahua cameras compromised: TP-Link flaws enable RCE
Microsoft Reveals Project Zenith Windows PCs Able to Run 30B+ AI Models Locally
Google issues warning of new Chrome zero-day flaw exploited
CrowdStrike’s ‘FalconFlank’ zero-day allows SYSTEM privileges
727,000 data exposes: French hospital fined €500,000
153 Million Driver’s License Surfaced on Dark Web: FBI Starts Investigation
Google Unveils Gemini 3.8 Flash Cyber to Identify and Auto-Patch Security Flaws
SonicWall SMA1000 SSRF Hits 10, Exploiting CVE-2026-83548
Gartner
70% of SOCs Will Pilot AI Agents: Only 15% Will See Results
CVE-2026-62911
Nearly 22,000 Microsoft Exchange Servers are vulnerable to attack
“This morning we discovered a 3rd party vendor had been compromised, injecting a malicious script into our frontend for some users. We’ve contained it & removed the affected dependency,” Polymarket said in a Thursday post on X.
It said that affected users will be reached out to and given back their money, but it didn’t say how many users were hurt and how much cryptocurrency was taken.
Blockchain security company PeckShield reported that roughly $3 million worth of pUSD, Polymarket’s USDC-backed trading currency, was stolen via a phishing campaign.
“The attacker bridged the stolen funds from Polygon to Ethereum and swapped them into ~1,893 ETH,” PeckShield said.
A blockchain expert said that the losses are reportedly about $3 million, with money taken from at least 11 people. It is not known who did the attack.
Related news:
Anthropic Confirms US Infrastructure Redeployment of Claude Mythos 5
