Polymarket to Refund Users After a $2.94 Million Phishing Attack Through a Compromised Vendor

Attackers injected malicious code into the prediction market's website by way of a third-party supplier, draining funds without touching the underlying contracts.

Polymarket, the largest crypto prediction market, said attackers compromised a third-party vendor and used that access to inject malicious code into its website, producing a phishing attack that drained an estimated $2.94 million from users…