No password or mnemonic required: Polymarket paused trading for about an hour after an attack

Odaily reports: According to monitoring by Bitcoin News, the attacker allegedly exploited users' still-active sessions to directly sell users' positions and withdraw funds through the Polymarket system. The attack reportedly originated from the compromise of a DebugBear website performance monitoring script, which was replaced with malicious code that users' browsers treated as trusted code. Polymarket resumed trading after about an hour and said it would compensate affected users. The incident has been referred to UK law enforcement.