> TritonInfoSec News
Home / Nov 02, 2026 / Story
0
#6 The Hacker News general November 01, 2026 at 07:25 UTC

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

By [email protected] (The Hacker News)

AI Summary

On October 29, attackers injected malicious code into Polymarket's website by replacing a legitimate DebugBear page-speed script with a weaponized version, resulting in theft of approximately $2.64–$2.7 million from 726 trader wallets. The attack automatically sold victims' open positions and transferred funds, representing a classic supply-chain/third-party script compromise against a high-value DeFi platform. This case underscores the risk of loading third-party JavaScript from external domains in financial applications and the need for subresource integrity controls.

Read full article → https://thehackernews.com/2026/11/hackers-steal-ab…

Relevance score: 82.0/100

# More from November 02

  1. 1
    FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist The Hacker News
  2. 2
    FBI links $6.3 billion Binance crypto heist to North Korean hackers BleepingComputer
  3. 3
    CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key The Hacker News
  4. 4
    New Android SMS of Death exploit can remotely crash unpatched phones BleepingComputer
  5. 5
    Alpine Linux rebuilds GitLab after attempted RCE attack BleepingComputer
  6. 7
    NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection The Hacker News
  7. 8
    Northflank security breach leads to abuse of customers' AI API keys BleepingComputer
  8. 9
    Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data The Hacker News
  9. 10
    Syrian Hacker Gets Prison Time in US After Over a Decade on the Run SecurityWeek