Polymarket 因供应商遭入侵而停机1小时;受影响用户将获全额赔偿
Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

原始链接: https://www.nbcnews.com/business/consumer/polymarket-trading-halt-hack-wallets-rcna606405

Polymarket 因第三方软件被入侵,于周四暂停其国际平台交易近一小时。用户称钱包被盗,但 Polymarket 未确认损失,并承诺赔偿受影响交易者。攻击似乎源自英国,并已转交英国执法部门;据报道涉及 DebugBear 网站分析软件,该软件也披露了安全事件。The Block 报道约 265 万美元加密货币被盗,但 Polymarket 拒绝确认。交易于美国东部时间下午 3 点恢复;美国平台似乎未受影响。Polymarket 表示已修复问题,并将补偿受影响用户。

Polymarket 在供应商被入侵后暂停交易约一小时,并称受影响用户将被“全额赔偿”。Hacker News 的讨论将这一消息与个人诈骗/黑客经历和更广泛的安全辩论混在一起。评论者讨论了 AI 可能使攻击更容易、更频繁,第三方脚本和供应链被入侵的风险,以及将所有联网系统视为已受损的建议是否现实。其他人分享了客户支持差、安全事件时机不佳等轶事,并认为受监管市场存在的原因之一就是此。一些技术建议包括子资源完整性与不可变 Web 应用引导加载器。整体而言,该帖将事件视为更广泛的安全失败与对在线平台不信任趋势的一部分。
相关文章

原文

Prediction markets platform Polymarket was forced to halt trading on its international platform Thursday for nearly an hour because of what it said was a compromise of third-party software.

There were also unconfirmed reports from users on Polymarket’s Discord channel who said their wallets had been drained.

While Polymarket did not confirm that users had lost money, it said on X post “anyone who has been impacted will be made whole.”

“We’ll make this right and are fully reimbursing all affected traders,” the company said in a subsequent post on X.

Polymarket said the attack appeared to emanate from the United Kingdom and that it had referred the matter to British law enforcement authorities.

The hackers gained access to the funds via software from DebugBear, a web analytics and website performance tool, according to a person familiar with the details who was granted anonymity to address an evolving security situation.

DebugBear said on X that it was experiencing an “ongoing security incident” at around 2 p.m. ET Thursday.

Crypto news website The Block reported that some $2.65 million in cryptocurrencies had been siphoned from Polymarket users’ wallets, citing data from blockchain analysis group Arkham.

A Polymarket representative declined to comment on that figure or on the precise nature of the attack.

Polymarket said in its X post that it had identified and fixed an issue affecting its international platform, Polymarket.com.

“One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement,” Polymarket said.

“Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online,” it added.

Trading began again at 3 p.m. ET after nearly an hour offline.

Polymarket’s U.S.-based platform did not appear to be affected by the breach.

Compromising third-party vendors has become a common way malicious actors gain access to large platforms and websites.

These hackers’ success in stealing money from Polymarket users, however, makes this a significant breach.

Polymarket was valued at $21 billion in September after a group of investors led by Donald Trump Jr. invested $1 billion in the platform.

The company processes about $200 million worth of trading activity daily.

Polymarket, along with rival Kalshi, has become the subject of an intense, multimillion-dollar battle between U.S. states and the Trump administration over who gets to regulate the prediction-market betting that occurs on the sites.

The platforms also continue to fight off potential insider trading activity. Earlier Thursday, Bloomberg News reported Polymarket was investigating reports of suspicious bets made amid Israel’s closely watched elections.

It is also investigating “dozens” of bets related to the U.S. midterms, according to the company’s head of global intelligence and investigations, Shana Bautista.

Earlier this month, Kalshi said it was looking into suspicious bets involving Trump’s choice for press secretary.

联系我们 contact @ memedata.com