Polymarket front-end hack drains $3.1M in PUSD from 11 wallets
A front-end hack of Polymarket drained approximately $3.1 million in PUSD from 11 user wallets, according to blockchain intelligence firm AMLBot. The stolen assets were Polymarket's native collateral and settlement token. The theft occurred on Polygon, and the funds were immediately moved to Ethereum across 11 wallets. Despite promised refunds to affected users, the hack has raised concerns about the security of third-party dependencies in prediction market platforms. The incident follows a supply-chain attack on a third-party JavaScript vendor that compromised the platform's frontend interface.
Polymarket must absorb $3.1 million in refunds while operating under a live CFTC investigation and Senate scrutiny. The triple pressure risks eroding user trust just as competitors such as Kalshi and Meta's emerging Arena platform target the same trader base.