The prediction market platform said the incident took place on Thursday morning and affected a “small number of users.”

A compromised third-party vendor allegedly let attackers inject a malicious frontend script

… Other investigators put the damage at close to $3 million, with Specter claiming that funds were drained from at least 11 victim wallets holding PUSD, Polymarket’s stablecoin used for trading on the platform.