Security

Polymarket's turbulent June just reached a new low on Thursday when the prediction market confirmed that a compromised third-party vendor allowed attackers to add malicious JavaScript into its frontend, draining an estimated $2.94 million from at least 11 user wallets in a single morning.

Former Celsius Network CEO Alex Mashinsky has been permanently barred from trading in markets regulated by the U.S. Commodity Futures Trading Commission (CFTC), closing one of the agency's final enforcement actions tied to the collapse of the crypto lending platform.

The target was a Bankr wallet auto-provisioned to Grok's X account on the Base network, holding roughly 3 billion DRB (DebtReliefBot) tokens worth between $155,000 and $174,000. The attacker emptied it in seconds.

A researcher flagged the exact vulnerability that drained ZetaChain’s gateway wallets. The team marked it as an intended behavior and closed the ticket.

The initiative, backed by Nether mind and Chain link Labs, will cover up to 30% of audit Costs for Ethereum mainnet teams, on a first-come first-served basis.