Leaderboard
437All-time rank
Polymarket International
Oct 29, 2026
$2.7M
Lost
$2.7M
Recovered
$0
Net loss
$2.7M
Unrecovered0% recovered
Attackers reportedly compromised a third-party website monitoring service used by Polymarket, allowing malicious JavaScript to execute on its international trading platform. The script hijacked authenticated trading sessions to sell prediction-market positions and transfer assets to attacker-controlled wallets.
Polymarket temporarily suspended trading, removed the affected integration, and committed to reimbursing impacted users.
- Target
- Other
- Classification
- Frontend & Infrastructure
- Technique
- Supply Chain Attack
- Attribution
- Unknown
- Chains
Polygon
Event timeline
- Oct 29, 2026Exploit executed — $2.7M drained via supply chain attack
- Attributed to Unknown
- Recovery status Unrecovered 0%