Malicious DebugBear Script Drains About $2.7 Million From Polymarket Traders
A compromised third-party performance-monitoring script on Polymarket sold positions and moved funds from some users with active sessions on October 29, 2026. The script had been loaded from DebugBear, whose vendor infrastructure was compromised. Polymarket said it removed the script, paused trading
