Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted. The post Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack appeared first on SecurityWeek .
On October 29, hackers stole approximately $2.64 million from Polymarket traders by hijacking a DebugBear script that Polymarket used to measure web page load times. The malicious code replaced the legitimate script, allowing the hackers to access trader positions and move funds to their own crypto wallet. Polymarket refunded about $2.7 million to 726 affected wallets, with the remaining $1.19 million paid to traders who lost money during the trading pause.
DebugBear, which provides a RUM tool for web page load speed, experienced compromised DNS records due to a domain registrar issue. Researchers found that the malicious file removed DebugBear's script and accessed the trader's API keys and trading permissions to take positions. Polymarket is strengthening its security measures, including implementing a stronger Content Security Policy, pinned versions, and sandboxing. The company has also referred the case to law enforcement.
Written by urgent.news from The Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
