# Polymarket to Refund Users After a $2.94 Million Phishing Attack Through a Compromised Vendor

Attackers injected malicious code into the prediction market's website by way of a third-party supplier, draining funds without touching the underlying contracts.

- Published: 2026-06-26T10:31:33.042Z
- Canonical: https://polylog.news/crypto/2026-06-26/polymarket-to-refund-users-after-a-2-94-million-phishing-att
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [crypto.news](https://crypto.news/polymarket-to-refund-users-after-2-94m-frontend-phishing-attack/), [crypto.news](https://crypto.news/rain-trade-launches-decentralized-prediction-market-as-the-industry-rethinks-how-questions-are-created-and-managed/)

Polymarket, the largest crypto prediction market, said attackers compromised a third-party vendor and used that access to inject malicious code into its website, producing a phishing attack that drained an estimated $2.94 million from users…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-06-26/polymarket-to-refund-users-after-a-2-94-million-phishing-att (subscription information: https://polylog.news/pricing).