hacker Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

hacker Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script — Rassegna informativa e sintesi tecnica curata da PCNext sulla base del report documentato da The Hacker News.

Sintesi della Notizia & Quadro dell’Evento

Malicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company.

Polymarket says it is refunding about $2.7 million to 726 affected wallets. Blockchain records show crypto worth about$2.64 million reached the hackers' wallet in under an hour.

Dettagli Tecnici & Approfondimento

The replaced script came from DebugBear, whose real user monitoring (RUM) tool measures how fast web pages load for real visitors.

Researchers at Hudson Rock downloaded the malicious file on October 29 from the address Polymarket's site used to load the DebugBear script. They also found a change in Polymarket's site code that removed the DebugBear script.

DebugBear's DNS records were compromised through its domain registrar, the company said on X. Its early findings indicate the attack targeted one customer's website. It has seen no sign of a break-in to its own systems, though it is still looking.