Polymarket user loses over $2M to phishing attack

In response to reports that a Polymarket user lost over $2 million in a hack, Josh Stevens, the company's Vice President of Engineering, stated on X that Polymarket is collaborating with the victim and relevant exchanges to freeze the stolen funds. He clarified that the victim was deceived by a fake webpage created by a hacker, where they entered a one-time password (OTP) for their Magic Link wallet, a simple wallet accessed via email links. The hacker then used this to withdraw the funds. Stevens urged users to be extremely cautious when accessing non-Polymarket domains and added that the company is internally considering the introduction of additional security features, such as multi-factor authentication (MFA), to enhance account protection.