Prediction market platform Polymarket stated that due to a third-party vendor being compromised, malicious code was injected into its website frontend, resulting in hackers stealing approximately $3 million in user assets. On-chain analysis shows that the incident affected fewer than 15 accounts, with the stolen funds primarily being the platform's stablecoin pUSD, which was subsequently converted to ETH. Polymarket stated that the vulnerability has been fixed and affected users will receive full compensation. This is the second security incident to occur on the platform in the past two months. (Decrypt)