> TritonInfoSec News
Home / Oct 31, 2026 / Story
0
#7 SecurityWeek general October 30, 2026 at 09:41 UTC

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

By Eduard Kovacs

AI Summary

Prediction market platform Polymarket suffered a supply chain attack via a compromised third-party website monitoring tool that injected malicious JavaScript to hijack logged-in user sessions and drain cryptocurrency funds, with over $2 million confirmed stolen and approximately $2.5 million traced to a suspected attacker wallet. Polymarket suspended trading and attributed the outage, which began at 2pm EST on October 30, to the third-party compromise. The attack demonstrates how JavaScript supply chain compromises in financial platforms can directly result in asset theft.

Read full article → https://www.securityweek.com/2-million-drained-fro…

Relevance score: 84.0/100

# More from October 31

  1. 1
    Binance links $6.3 billion crypto theft to compromised DevOps laptop BleepingComputer
  2. 2
    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV The Hacker News
  3. 3
    Malicious Claude Code extension on Cursor planted SSH backdoors BleepingComputer
  4. 4
    Critical Linux kernel flaw allows remote root attacks on MPTCP servers BleepingComputer
  5. 5
    Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide The Hacker News
  6. 6
    Trezor warns of suspected crypto-theft implant in hardware wallet BleepingComputer
  7. 8
    Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach The Record
  8. 9
    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw The Hacker News
  9. 10
    Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents Graham Cluley