GoPlus: Polymarket hack caused by supply chain contamination of service provider DebugBear's RUM script.

October 30: GoPlus released a vulnerability analysis on social media stating that a user asset theft incident occurred on Polymarket's international site. The RUM script of third-party performance monitoring service provider DebugBear was compromised in a supply chain attack, and malicious code was delivered to user pages and abused their trading and signing permissions.

On-chain analysis shows that the main path involves 710 DepositWallets and 731 addresses, with losses of approximately $2.71 million (the number of addresses does not represent the actual number of users).

Polymarket officially stated afterward that the issue had been fixed and services restored, and promised full compensation for affected traders. The actual compensation progress remains subject to official follow-up announcements.