Polymarket halts trading after third-party breach drains $2.5M in crypto
Polymarket suspended trading Thursday after a compromised third-party provider distributed malicious JavaScript that drained user funds, with security researchers tracing about $2.5 million in POL tokens to a suspected attacker wallet. The platform briefly went into cancel-only mode, fixed the issue within roughly an hour, and resumed trading, saying all affected users will be reimbursed. The company has referred the incident to law enforcement but has not disclosed how many users were affected or the exact amount stolen.