Hackers used malicious code on the Polymarket website to sell positions and move funds from some signed-in traders on October 29, according to the source report. The code replaced a page-speed script that the site loaded from an outside company.
Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about $2.64 million reached the hackers, the report says.
The report names DebugBear as the company tied to the page-speed script. The source does not say how the script was replaced or who carried out the attack.