Back Kucoin

Over $2.94M lost in Polymarket phishing attack affecting 11+ users

Kucoin • June 25, 2026

Huo Xing Finance reports that on June 25, according to monitoring by @SpecterAnalyst, hackers have launched phishing attacks targeting Polymarket users, with estimated losses reaching $2.94 million to date. The attackers have drained funds from over 11 victim wallets holding PUSD, converted the stolen assets into ETH, and consolidated the funds into the following address: 0xe65b1C586757c5510B60F998Eebb14C1eF71E1eD

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Polymarket Suffers $3M Theft from Supply-Chain Attack via Third-Party Vendor On June 25, 2026, Polymarket confirmed a security breach that led to the theft of approximately $3 million from fewer than 15 user accounts. The attack was executed through a compromised third-party vendor, which allowed hackers to inject malicious code into Polymarket's website frontend. The stolen funds primarily consisted of Polymarket's pUSD stablecoin, which were quickly converted to Ethereum (ETH) to obscure the trail. Blockchain analysts reported that over 11 wallets were affected, with the attackers consolidating the stolen assets into a single address. Polymarket has assured all impacted users that they will be fully reimbursed and has removed the compromised vendor dependency. This incident follows a previous breach in May 2026, where the platform lost approximately $700,000 due to a separate attack targeting employee wallets. The company is now facing scrutiny regarding its vendor vetting processes and security measures. 49 sources 65

Extracted Entities

Over $2.94M lost in Polymarket phishing attack affecting 11+ users

The full story

Extracted Entities

Attack Types (1)

eth (1)

MITRE ATT&CK (1)