About $2.65 million in funds were swapped into POL, and the suspected Polymarket attacker subsequently transferred out approximately 28.64 million POL

Odaily Report: The suspected Polymarket attacker address (0x3F99…Ffc18) converted the obtained USDC.e and USDC into POL, at one point holding approximately $2.65 million worth of POL, and then transferred out about 28.64 million POL in three transactions. Cybersecurity firm Hudson Rock stated that this address was hardcoded into a script hosted by DebugBear containing wallet-draining code, serving as a backup receiving address. Previously, Polymarket stated that a third-party service provider had been compromised, and affected users would receive full compensation.