According to a Bitquery investigation, hackers drained 737 Polymarket accounts of $2.73 million within one hour on October 29, executing 985 unauthorized withdrawals between 17:10 and 18:10 UTC. Rather than exploiting a smart contract vulnerability, attackers used valid wallet approvals routed through Polymarket's transaction relayer to authorize the withdrawals. The largest individual account loss reached approximately $358,000. Polymarket confirmed the breach involved malicious code injected into a third-party website script and announced $3.9 million in total reimbursements to affected users.

View Source

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.