Polymarket says it’s refunding some users after hackers stole their crypto.

In a post spotted by TechCrunch, Polymarket says “a 3rd party vendor had been compromised, injecting malicious script into our frontend for some users.” The update comes just hours after blockchain security firm PeckShield notified users of a potential phishing campaign targeting Polymarket users. Around $3 million worth of Polymarket’s crypto token was drained from user wallets, PeckShield says. Posts from this author will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. Posts from this topic will be added to your daily email digest and your homepage feed. A free daily digest of the news that matters most. The Verge is a part of PMX Global, LLC, a subsidiary of Penske Media Corporation. © 2026 VM Publishing, LLC. All rights reserved. Sign in to see your notifications or create an account to join the conversation.