INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Polymarket Halts Trading After Crypto-Draining Script Breach Exposed
Executive Summary
AI-generated
On October 29, 2026, prediction market platform Polymarket temporarily suspended trading after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. The attack is attributed to the use of T1059.007 - JavaScript, a tactic employed by attackers to execute malicious code. Cryptocurrency was targeted as the industry affected, with the stolen funds amounting to $2.5 Stolen / Extorted Funds. The breach occurred through a third-party service, which has been identified as [IOC HIDDEN • LOGIN REQUIRED] and [IOC HIDDEN • LOGIN REQUIRED]. As a result of this incident, Polymarket halted trading on Thursday, with the platform temporarily suspending operations to address the compromised service.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables 4 IoCs Login Required
Indicators of Compromise (IoCs) Protected
Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.
urls 1
domains 3
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
Tactical Metrics
Intelligence Sources
AlienVault OTX
2026-10-29