Polymarket, a prediction market platform, stated that due to a breach by a third-party vendor, malicious code was implanted into its website frontend, resulting in hackers stealing approximately $3 million in user assets.

On-chain analysis shows that the incident affected fewer than 15 accounts, and the stolen funds were primarily the platform's stablecoin pUSD, which was subsequently exchanged for ETH.
Polymarket stated that the vulnerability has been fixed and affected users will receive full compensation.
This is the second security incident on the platform in the past two months. (Decrypt)