Polymarket Says It Contained Frontend Compromise After Malicious Script Injection

Polymarket said it contained a security compromise and removed an affected dependency after attackers injected a malicious script into its frontend. According to Cointelegraph, the company stated that it had contained the incident and taken action to eliminate the compromised component from its system. Polymarket’s update focused on the steps it said it took to address the issue, including removing the dependency tied to the malicious script. The company did not provide additional details in the statement about the attackers, the method used to inject the script beyond noting it was placed in the frontend, or the broader impact of the incident.

Polymarket’s statement indicated the issue was limited to the compromised frontend component and that remediation involved removing the affected dependency. According to the report, the company characterized the situation as contained, suggesting it had implemented measures to stop further exposure related to the injected script. No further information was provided in the cited update regarding whether users were affected, what data may have been at risk, or whether additional security measures were introduced beyond the removal of the dependency. The report also did not include any timeline for when the compromise occurred or when the dependency was removed.