POLYMARKET HIT BY $3M SUPPLY-CHAIN ATTACK

The attack exploited a breach at a third-party vendor integrated with Polymarket's infrastructure, allowing attackers to inject malicious scripts directly into the platform's user interface. Customers unknowingly executed the code while accessing Polymarket, resulting in unauthorized fund transfers. Polymarket disclosed the incident and committed to covering the full $3 million loss for impacted users. The platform has since patched the vulnerability and is conducting a security review of its vendor dependencies. Supply-chain attacks represent a growing threat to crypto platforms and financial services. By targeting trusted third parties rather than companies directly, attackers can bypass security measures and gain access to large user bases. This incident underscores the risks of integrating external code and services without rigorous security vetting.