Polymarket customers lose $3 million in supply-chain attack

Polymarket was hacked via a compromised third-party vendor dependency, injecting malicious scripts into its frontend. Around $3 million in crypto was stolen from roughly 11 users, according to PeckShield. Polymarket is refunding victims in full and has removed the affected dependency.