0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18

Ethereum Address

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Identified as the attacker's wallet holding stolen funds

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Blockchain · 2

Web search · 2

Related Clusters (2)

Polymarket Hack: $2.7 Million Drained via DebugBear Script

3h ago·12 sources

Polymarket Exploit: $700K Drained from Internal Wallet

2h ago·1 sources

Related Articles (4)

Polymarket Suspends Trading Amid Security Incident; Users Report Unauthorized Fund Transfers

Polymarket Pauses Trading as Prediction Market Investigates Security Incident

Tech.Yahoo·3h ago

Polymarket Pauses Trading as Prediction Market Investigates Security Incident

Decrypt.Co·3h ago

Polymarket Breach Alert: Wallet-Draining Code Found in a Third-Party Script

Infostealers·3h ago

Related Entities

Data Breach Data Exfiltration Polymarket Polygon CWE-798 - Use of Hard-coded Credentials T1041 - Exfiltration Over C2 Channel T1059 - Command and Scripting Interpreter Relay USDC.e DebugBear