Polymarket phishing hack losses updated to $3.1 million, platform promises refunds

Hackers stole $3.1 million in PUSD tokens from 11 Polymarket users via a compromised third-party vendor script. The platform has pledged full refunds, while also facing a federal investigation over allegedly deceptive marketing.

• A compromised third-party vendor injected a malicious script into Polymarket's frontend, stealing $3.1 million from 11 user wallets.
• Stolen PUSD tokens were moved from Polygon to Ethereum; Polymarket has removed the dependency and pledged full refunds.
• The incident follows a March breach of $520,000 and a December Discord security incident at the prediction market platform.
• Polymarket is also under federal investigation over allegedly deceptive social media promotions of user winnings.

Coinporta summarises news for fast scanning. Full reporting belongs to the source.