A monitoring script sat behind the Polymarket drain. Check what your site loads.
By Lior AharonovFounder, 7IT Solutions ·
What happened
On Thursday, 29 October, Polymarket halted trading on its international platform after reports of unauthorized withdrawals, and resumed about an hour later. SecurityWeek reports a script from monitoring vendor DebugBear was involved, and DebugBear confirmed an ongoing incident and told customers to remove its snippet. Polymarket has not disclosed a loss figure.
Why it matters
A third-party script runs inside your logged-in users' browsers with their authority. SecurityWeek reports this one tried to sell positions or send tokens to an attacker's address, reusing the session instead of stealing a password.
What to do
If you load DebugBear's real user monitoring snippet, remove it now. Then list every third-party script on your logged-in pages and drop the ones you cannot justify.
My take
Lior Aharonov
Founder, 7IT Solutions
Every script tag is a key you handed to a stranger. Count the keys.
Sources
| SecurityWeek: $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack | securityweek.com |
Researched with AI tools; every fact is checked against the linked sources.