{"id":611467,"date":"2026-06-25T14:03:19","date_gmt":"2026-06-25T18:03:19","guid":{"rendered":"https:\/\/ambcrypto.com\/?p=611467"},"modified":"2026-06-25T14:03:19","modified_gmt":"2026-06-25T18:03:19","slug":"polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack","status":"publish","type":"post","link":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/","title":{"rendered":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack"},"content":{"rendered":"

Prediction market platform Polymarket says it will fully reimburse affected users after a compromised third-party vendor injected malicious code into its frontend. This exposed some users to a phishing attack that blockchain security researchers estimate drained nearly <\/span>$3 million<\/b>.<\/span><\/p>\n

In a statement published on <\/span>June 25<\/b>, Polymarket said it discovered the compromised vendor earlier in the day, removed the affected dependency, and contained the incident. The company added that it is contacting impacted users and will refund them in full.<\/span><\/p>\n

The incident appears to have affected only users who interacted with the compromised frontend during the attack window rather than the platform’s underlying smart contracts.<\/span><\/p>\n

Third-party compromise injected malicious script<\/b><\/h2>\n

According to Polymarket, the attack originated from a compromised third-party vendor that injected a malicious script into parts of the platform’s frontend.<\/span><\/p>\n

The company said it has since removed the affected dependency and contained the incident. However, it has not disclosed the identity of the compromised vendor or released a detailed technical postmortem.<\/span><\/p>\n

The platform emphasized that it is working directly with affected users while continuing its investigation.<\/span><\/p>\n

Security firms estimate nearly $3M in losses<\/b><\/h2>\n

Blockchain security firm PeckShield reported that the incident appeared to be a phishing campaign targeting Polymarket users.<\/span><\/p>\n

According to their findings, attackers drained approximately <\/span>$3 million worth of PUSD<\/b> from more than <\/span>11 victim wallets<\/b> before bridging the stolen funds from Polygon to Ethereum.<\/span><\/p>\n

The researchers said the attacker subsequently exchanged the proceeds for roughly <\/span>1,893 ETH<\/b>, consolidating the assets into a monitored Ethereum address.<\/span><\/p>\n

Polymarket has not publicly confirmed the estimated losses or the number of affected wallets.<\/span><\/p>\n

Platform promises full reimbursement<\/b><\/h2>\n

Unlike many phishing incidents that leave users responsible for losses, Polymarket said it intends to reimburse everyone affected by the attack.<\/span><\/p>\n

The company said it is contacting impacted users directly while continuing to investigate the compromise.<\/span><\/p>\n

No timeline has been provided for either the reimbursement process or the publication of a full incident report.<\/span><\/p>\n

\n

Final Summary<\/b><\/h2>\n
    \n
  • Polymarket says a compromised third-party vendor injected malicious code into its frontend and has pledged to reimburse affected users.<\/span><\/li>\n
  • Security researchers estimate the phishing campaign stole roughly $3 million before the funds were bridged to Ethereum and converted into ETH.<\/span><\/li>\n<\/ul>\n
    \n

     <\/p>\n","protected":false},"excerpt":{"rendered":"

    The prediction market platform says it has contained a third-party frontend compromise and will fully reimburse users affected by the phishing attack.<\/p>\n","protected":false},"author":76,"featured_media":611486,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"footnotes":""},"categories":[44,66,3,4,20],"tags":[],"class_list":["post-611467","post","type-post","status-publish","format-standard","has-post-thumbnail","category-global-news","category-new-news","category-news","category-social","category-trading-view"],"acf":[],"yoast_head":"\nPolymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto<\/title>\n<meta name=\"description\" content=\"Polymarket says it will reimburse users after a compromised third-party vendor injected malicious code into its frontend.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-image-preview:large\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto\" \/>\n<meta property=\"og:description\" content=\"The prediction market platform says it has contained a third-party frontend compromise and will fully reimburse users affected by the phishing attack.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"AMBCrypto\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cryptoamb\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-25T18:03:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Adewale Olarinde\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/WaleRexx\" \/>\n<meta name=\"twitter:site\" content=\"@CryptoAmb\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Adewale Olarinde\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"ReportageNewsArticle\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/\"},\"author\":{\"name\":\"Adewale Olarinde\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#\\\/schema\\\/person\\\/a3ac3193a21ee61fa9d68ccd6bfa3885\"},\"headline\":\"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack\",\"datePublished\":\"2026-06-25T18:03:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/\"},\"wordCount\":372,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Adewale-4-1-4-e1782410318857.png\",\"articleSection\":[\"Global News\",\"News\",\"News 1\",\"Social\",\"Trading View\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/\",\"name\":\"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Adewale-4-1-4-e1782410318857.png\",\"datePublished\":\"2026-06-25T18:03:19+00:00\",\"description\":\"Polymarket says it will reimburse users after a compromised third-party vendor injected malicious code into its frontend.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Adewale-4-1-4-e1782410318857.png\",\"contentUrl\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Adewale-4-1-4-e1782410318857.png\",\"width\":1600,\"height\":900,\"caption\":\"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#website\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/\",\"name\":\"AMBCrypto\",\"description\":\"Stay Ahead!\",\"publisher\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#organization\"},\"alternateName\":\"AMBCrypto News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ambcrypto.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#organization\",\"name\":\"AMBCrypto\",\"alternateName\":\"AMBCrypto News\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/amb-wide.jpg\",\"width\":600,\"height\":60,\"caption\":\"AMBCrypto\"},\"image\":{\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/cryptoamb\",\"https:\\\/\\\/x.com\\\/CryptoAmb\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/13629485\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/#\\\/schema\\\/person\\\/a3ac3193a21ee61fa9d68ccd6bfa3885\",\"name\":\"Adewale Olarinde\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/IMG_2326-scaled-e1760632492733-100x100.jpg\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/IMG_2326-scaled-e1760632492733-100x100.jpg\",\"contentUrl\":\"https:\\\/\\\/ambcrypto.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/IMG_2326-scaled-e1760632492733-100x100.jpg\",\"caption\":\"Adewale Olarinde\"},\"description\":\"Adewale Olarinde is a crypto journalist and data-driven storyteller with a Master\u2019s degree in International Relations. He covers digital assets, markets, and policy with a focus on clarity and context. Outside of work, he\u2019s a lifelong Manchester United supporter and a big music lover.\",\"sameAs\":[\"http:\\\/\\\/www.linkedin.com\\\/in\\\/adewale-olarinde-a90961168\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/twitter.com\\\/WaleRexx\"],\"knowsAbout\":[\"Technical Analysis\",\"Crypto Market Trends\",\"Crypto Market Analysis\"],\"jobTitle\":\"Journalist\",\"worksFor\":\"AMBCrypto\",\"url\":\"https:\\\/\\\/ambcrypto.com\\\/author\\\/adewale-olarinde\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto","description":"Polymarket says it will reimburse users after a compromised third-party vendor injected malicious code into its frontend.","robots":{"index":"index","follow":"follow","max-image-preview":"max-image-preview:large"},"canonical":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/","og_locale":"en_US","og_type":"article","og_title":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto","og_description":"The prediction market platform says it has contained a third-party frontend compromise and will fully reimburse users affected by the phishing attack.","og_url":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/","og_site_name":"AMBCrypto","article_publisher":"https:\/\/www.facebook.com\/cryptoamb","article_published_time":"2026-06-25T18:03:19+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png","type":"image\/png"}],"author":"Adewale Olarinde","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/WaleRexx","twitter_site":"@CryptoAmb","twitter_misc":{"Written by":"Adewale Olarinde","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"ReportageNewsArticle","@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#article","isPartOf":{"@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/"},"author":{"name":"Adewale Olarinde","@id":"https:\/\/ambcrypto.com\/#\/schema\/person\/a3ac3193a21ee61fa9d68ccd6bfa3885"},"headline":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack","datePublished":"2026-06-25T18:03:19+00:00","mainEntityOfPage":{"@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/"},"wordCount":372,"commentCount":0,"publisher":{"@id":"https:\/\/ambcrypto.com\/#organization"},"image":{"@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png","articleSection":["Global News","News","News 1","Social","Trading View"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/ambcrypto.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/","url":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/","name":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack - AMBCrypto","isPartOf":{"@id":"https:\/\/ambcrypto.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#primaryimage"},"image":{"@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png","datePublished":"2026-06-25T18:03:19+00:00","description":"Polymarket says it will reimburse users after a compromised third-party vendor injected malicious code into its frontend.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ambcrypto.com\/polymarket-to-reimburse-users-after-third-party-compromise-triggers-3m-phishing-attack\/#primaryimage","url":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png","contentUrl":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/06\/Adewale-4-1-4-e1782410318857.png","width":1600,"height":900,"caption":"Polymarket to reimburse users after third-party compromise triggers $3M phishing attack"},{"@type":"WebSite","@id":"https:\/\/ambcrypto.com\/#website","url":"https:\/\/ambcrypto.com\/","name":"AMBCrypto","description":"Stay Ahead!","publisher":{"@id":"https:\/\/ambcrypto.com\/#organization"},"alternateName":"AMBCrypto News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ambcrypto.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ambcrypto.com\/#organization","name":"AMBCrypto","alternateName":"AMBCrypto News","url":"https:\/\/ambcrypto.com\/","logo":{"@type":"ImageObject","@id":"https:\/\/ambcrypto.com\/#\/schema\/logo\/image\/","url":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2026\/04\/amb-wide.jpg","width":600,"height":60,"caption":"AMBCrypto"},"image":{"@id":"https:\/\/ambcrypto.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cryptoamb","https:\/\/x.com\/CryptoAmb","https:\/\/www.linkedin.com\/company\/13629485\/"]},{"@type":"Person","@id":"https:\/\/ambcrypto.com\/#\/schema\/person\/a3ac3193a21ee61fa9d68ccd6bfa3885","name":"Adewale Olarinde","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2025\/10\/IMG_2326-scaled-e1760632492733-100x100.jpg","url":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2025\/10\/IMG_2326-scaled-e1760632492733-100x100.jpg","contentUrl":"https:\/\/ambcrypto.com\/wp-content\/uploads\/2025\/10\/IMG_2326-scaled-e1760632492733-100x100.jpg","caption":"Adewale Olarinde"},"description":"Adewale Olarinde is a crypto journalist and data-driven storyteller with a Master\u2019s degree in International Relations. He covers digital assets, markets, and policy with a focus on clarity and context. Outside of work, he\u2019s a lifelong Manchester United supporter and a big music lover.","sameAs":["http:\/\/www.linkedin.com\/in\/adewale-olarinde-a90961168","https:\/\/x.com\/https:\/\/twitter.com\/WaleRexx"],"knowsAbout":["Technical Analysis","Crypto Market Trends","Crypto Market Analysis"],"jobTitle":"Journalist","worksFor":"AMBCrypto","url":"https:\/\/ambcrypto.com\/author\/adewale-olarinde\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/posts\/611467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/users\/76"}],"replies":[{"embeddable":true,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/comments?post=611467"}],"version-history":[{"count":0,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/posts\/611467\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/media\/611486"}],"wp:attachment":[{"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/media?parent=611467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/categories?post=611467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ambcrypto.com\/wp-json\/wp\/v2\/tags?post=611467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}