HN

Need help?
<- Back
Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

Polymarket 1h halt after vendor compromise; affected users will be 'made whole'

theanonymousone

Comments (33)

  • sroerick
    About a month and a half I made a Polymarket account with my Google login. I never traded anything. My account got hacked and they started draining my bank account. Polymarket support was completely non responsive. My bank reversed the charges. About 5 days later I got a text from Polymarket support telling me that it looked like I was having trouble making a deposit and they could help me out. I sent them screenshots of them not responding to my support requests and then never heard back.My Google account was not compromised. I wouldn't touch Polymarket ever again. There is some kind of massive scam happening here.
  • dumberquestions
    Friend of mine, who's been treated as the unlucky one as an inside joke, made a binance account - after avoiding crypto for years - just hours before the hack happened, it's now official lore that this whole chain of security incidents is entirely his fault.
  • trio8453
    Kind of insane how much of the front page is about security compromises today.
  • rhodey
    This is the same style of attack that took 1.5B from Bybit ~1yr ago.Fundamentally: There is no way to lock webapps to reproducible builds.Except: IPFS could do it but IPFS has been very very poorly maintained.I published IPFS-boot ~1yr ago and its a simple idea:1. deploy a webapp bootloader using something immutable like IPFS2. bootloader is basically react hot reloading except user agrees what to load3. bootloader polls a mutable list of app updates and user agree or disagree each updateNow the bootloader has a static content addressable URI but it can also do updates. TBH I think IPFS may be a lost cause but something needs to take its place and this idea is transferable to whatever that is. https://github.com/rhodey/IPFS-boot
  • gnabgib
    Discussion yesterday (46 points, 13 comments) https://news.ycombinator.com/item?id=50295883Wired's coverage (25 points) https://news.ycombinator.com/item?id=50296328WSJ's coverage (20 points) https://news.ycombinator.com/item?id=50294287
  • bcvvvy
    Oh so these incidents are why we have regulated markets! Who’d have thought?
  • mvc
    How much tax revenue does the UK government get from polymarket. Why should UK tax payers pay to investigate a breach of their systems?
  • anon
    undefined
  • anon
    undefined
  • totallymike
    [dead]