Approximately $2.65 million in funds converted to POL, suspected Polymarket attacker subsequently transferred out approximately 28.64 million POL

Odaily: A suspected Polymarket attacker address (0x3F99…Ffc18) converted the obtained USDC.e and USDC into POL, at one point holding approximately $2.65 million worth of POL, and subsequently transferred out approximately 28.64 million POL in three transactions. Cybersecurity firm Hudson Rock stated that this address was hardcoded into a script hosted by DebugBear containing wallet-draining code, serving as a backup receiving address. Previously, Polymarket stated that a third-party service provider had been compromised, and affected users would receive full compensation.