Decentralized prediction market Polymarket revealed that recent user account thefts resulted from a security flaw in a third-party authentication service by Magic Labs. Users lost funds without interacting with phishing attempts or enabling two-factor authentication. The issue has been resolved, and affected users will be contacted, though details on losses or number of victims remain undisclosed.