According to The Block, decentralized prediction market platform Polymarket confirmed that the recent user account theft incident was due to a security vulnerability in its third-party authentication service provider. Some users who registered through Magic Labs had their funds drained without clicking phishing links or enabling two-factor authentication.
The platform stated that the vulnerability has been fixed, there is no ongoing risk, and affected users will be contacted individually. The exact amount of losses and number of affected users have not been disclosed.
