Polymarket halts trading after crypto-draining script breach, $2.5M traced

Polymarket, a prediction market platform, temporarily halted trading after hackers compromised a third-party service to inject cryptocurrency-draining JavaScript into the platform. Approximately $2.5 million in assets was traced to a suspected attacker wallet. The attack involved a supply chain-style compromise where malicious JavaScript was distributed through a third-party provider. The incident highlights risks associated with third-party script dependencies in financial platforms handling cryptocurrency. Polymarket suspended trading as a precautionary measure while investigating the breach. The attack is consistent with a growing trend of crypto-draining scripts targeting high-value DeFi and prediction market platforms.