Polymarket says hackers stole users’ funds

Polymarket, a major cryptocurrency prediction market platform, experienced a security breach through a third-party vendor that allowed attackers to inject malicious code and steal approximately $3 million in user funds, representing a critical supply chain security vulnerability affecting fintech and cryptocurrency platforms. Beyond the technical breach, the incident compounds existing trust issues following revelations of deceptive promotional practices, creating significant reputational and regulatory risk for the organization. IT leaders must recognize this as a cautionary example of how third-party dependencies can bypass internal security controls and compromise customer assets, particularly in regulated financial services and blockchain sectors.