First reported June 26, 2026 by Cointelegraph · covered by 2 sources
Polymarket said it contained the compromise and removed the affected dependency after attackers injected a malicious script into its frontend.