JavaScript Integrity Monitoring
Polymarket's CSP Allowed Every Part of the $2.6 Million Crypto Theft
For about fifty minutes on Thursday afternoon, a performance monitoring script loaded on polymarket.com was compromised and started quietly emptying the accounts of anyone it targeted. It walked off with roughly 28.6 million POL, worth about USD $2.6 million. This is exactly the kind of attack we