$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

A supply chain attack targeting Polymarket traders involved malicious code injected via a compromised third-party website monitoring tool, DebugBear. The malicious JavaScript hijacked logged-in user sessions to siphon funds by selling positions or transferring tokens to attacker-controlled addresses. Polymarket's international platform was affected, resulting in over $2 million in losses, while the US platform remained unaffected. Polymarket halted trading temporarily, removed the malicious script, and pledged to reimburse affected users. DebugBear confirmed the incident and advised users to remove its monitoring snippet.

• securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack/ (opens in a new tab)

• Applying Security by Design and Cyber Immunity principles to protect AI systems | Kaspersky official blogAnalysis2026-10-29
• 26th October · Threat Intelligence ReportBreach2026-10-26
• Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooksHighVulnerability2026-10-23
• LiteLLM Compromised in Fresh Supply Chain AttackBreach2026-10-23
• AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseCampaign2026-10-21