Polymarket said it restored trading on its international platform after a third-party provider compromise caused outages on Thursday. The cryptocurrency-based prediction market pledged to fully reimburse affected traders, but did not disclose the amount stolen or identify the attacker.
According to Recorded Future News, the company temporarily halted trading while addressing the incident. Polymarket said it had identified and fixed the issue and referred the provider compromise to relevant law enforcement. A spokesperson directed the publication to the company’s statement without answering further questions.
Several blockchain security companies traced suspected losses to an account alleged to have siphoned more than $2.1 million in cryptocurrency from users, Recorded Future News reported. That figure was not a company-confirmed loss total.
Researchers point to website performance provider
Polymarket did not name the compromised provider. Cybersecurity firm Hudson Rock identified it as DebugBear, which supplies website performance services, according to Recorded Future News.
Hudson Rock said it found evidence of “wallet-draining code” in a third-party script, designed to discover accounts, select assets and transfer funds to a designated account. The firm also said Polymarket removed DebugBear code from its website on Thursday.
Those findings leave important limits on the known scope. Hudson Rock said it could not determine the number of victims or total losses, and that its evidence neither identified an attacker nor demonstrated a wider compromise affecting other DebugBear customers.
Separately, Recorded Future News reported that DebugBear acknowledged on Thursday that it was being affected by an ongoing security incident and urged customers to remove its embed codes from their websites. That instruction extended to DebugBear customers, while Polymarket’s statement concerned the disruption to its international platform and its commitment to reimburse affected traders.
