Security AlertHigh
Polymarket refunds traders after hacked third-party script drained wallets
Nov 1, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Malicious code in a third-party DebugBear script hit Polymarket traders on October 29. Polymarket says it is refunding about $2.7 million to 726 affected wallets.
Key points
- The malicious script replaced a page-speed tool loaded from DebugBear.
- Blockchain records show about $2.64 million reached the hackers' wallet.
- Polymarket paused trading, cleared caches and reset active login sessions.
Why it matters
If you trade on crypto platforms, a supply chain issue can drain funds even when the site itself looks normal. This is a reminder to keep wallet security tight and to monitor exchange notices. For businesses, third-party web tools can become a direct financial risk.
Who’s affected: Polymarket traders and wallets
What to do
- Review exchange status pages before trading.
- Use extra caution with logged-in wallet sessions.
- Monitor vendor notices for third-party script changes.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.