Leaderboard
778All-time rank
P

Polymarket

Nov 11, 2025

$500K
Lost
$500K
Recovered
$0
Net loss
$500K
Unrecovered0% recovered

Hackers injected malicious scripts into Polymarket's comment sections, posting phishing links that appeared to offer access to private markets. Users clicking the links were redirected to a fake Polymarket interface where attackers captured their credentials.

Over $500K in user funds were drained via compromised email-login accounts.

Target
DeFi
Classification
Social Engineering
Technique
Phishing
Attribution
Unknown
Chains
PolygonEthereum

Event timeline

  1. Nov 11, 2025
    Exploit executed — $500K drained via phishing
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents