Hackers injected malicious scripts into Polymarket's comment sections, posting phishing links that appeared to offer access to private markets. Users clicking the links were redirected to a fake Polymarket interface where attackers captured their credentials. Over $500K in user funds were drained via compromised email-login accounts.

According to a post by crypto trader @25usdc, hackers are exploiting the comment section of Polymarket to carry out scam activities, resulting in losses exceeding $500,000. The attackers post links to their phishing websites in an obfuscated, non-plain-text format. When users log in to these sites via email, malicious scripts are injected, leading to data breaches and the loss of funds.