Polymarket faces new CFTC scrutiny over alleged deceptive ads

A compromised third-party vendor allowed attackers to inject a malicious script into Polymarket’s frontend, resulting in a phishing attack that drained about $2.94 million from at least 11 user wallets. Polymarket says the issue was contained, the dependency removed, and all affected users will be refunded. The article also says June crypto exploit losses totaled $74.9 million across 29 incidents.
AI Analysis
The story reports an actual theft from user wallets and a frontend compromise, which is clearly negative for Polymarket. The promise to refund users and contain the issue limits the damage, but the incident is still a material security event.