Polymarket freezes services after browser-based hack steals millions
Malicious software uploaded to user browsers allowed attackers to steal millions from individual Polymarket accounts. The incident highlights operational security risks at the user level rather than platform protocol failures.
Polymarket experienced a security incident in which malicious software was uploaded to users' browsers, allowing attackers to take control of accounts with existing permissions. The hackers stole an estimated couple of million dollars from individual user accounts, rather than from Polymarket's reserves. The platform temporarily froze services to resolve the issue. This attack vector is distinct from the recent Binance hack, as it involved compromising user devices and browser software rather than exchange infrastructure or cryptographic protocols. The incident is characterized as a user-level operational security failure, where security systems function normally but are bypassed through compromised access points. One observer described the situation as "kind of like a burglar going in overnight with the cleaning crew and just then walking out with everything." The event underscores the need for individual vigilance in managing digital assets, as risks persist even when platform-level security is robust.