Back Bitget

More than ten Polymarket users suffered phishing attacks, with total losses reaching $2.94 million

Bitget • June 25, 2026

BlockBeats news, on June 25, according to monitoring by @SpecterAnalyst, hackers have launched phishing attacks targeting Polymarket users, with estimated losses reaching $2.94 million so far.

The attacker has siphoned funds from over 11 victim wallets holding PUSD, converted the stolen assets into ETH, and concentrated the funds at the following address: 0xe65b1C586757c5510B60F998Eebb14C1eF71E1eD

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Polymarket Suffers $3M Theft from Supply-Chain Attack via Third-Party Vendor On June 25, 2026, Polymarket confirmed a security breach that led to the theft of approximately $3 million from fewer than 15 user accounts. The attack was executed through a compromised third-party vendor, which allowed hackers to inject malicious code into Polymarket's website frontend. The stolen funds primarily consisted of Polymarket's pUSD stablecoin, which were quickly converted to Ethereum (ETH) to obscure the trail. Blockchain analysts reported that over 11 wallets were affected, with the attackers consolidating the stolen assets into a single address. Polymarket has assured all impacted users that they will be fully reimbursed and has removed the compromised vendor dependency. This incident follows a previous breach in May 2026, where the platform lost approximately $700,000 due to a separate attack targeting employee wallets. The company is now facing scrutiny regarding its vendor vetting processes and security measures. 49 sources 65

Extracted Entities

More than ten Polymarket users suffered phishing attacks, with total losses reaching $2.94 million

The full story

Extracted Entities

Attack Types (1)

eth (1)

MITRE ATT&CK (1)