Polymarket exploited by hackers through third-party vulnerabilities, thousands of user funds drained

【ChainNews】Polymarket has encountered trouble this time. Recently, users of the decentralized prediction market platform experienced theft incidents, and the official confirmation was that a system vulnerability in the third-party authentication service provider Magic Labs was to blame.

What’s more upsetting is that some users who registered through Magic Labs, even without clicking any suspicious links and having enabled two-factor authentication protection, still had their funds transferred out. This directly hits the pain point of Web3 users — no matter how cautious you are, you can't prevent issues caused by underlying service providers.

The good news is that the official statement says the vulnerability has been fixed, and there is currently no ongoing risk. Affected users will be notified separately about the handling plan. However, the platform has not disclosed how many people were affected or the scale of the losses, which has also raised some doubts.

This incident also serves as a reminder to all Web3 users that even when operating on well-known platforms, you should stay vigilant — the security defenses of third-party service providers can sometimes be weaker than the platform itself.