exploit
Polymarket frontend vendor compromise drains ~$3.1M in PUSD from 11+ user wallets
A poisoned JS dependency on Polymarket's frontend drained ~$3.1M in PUSD from 11+ wallets on June 25, swapped into ~1,893 ETH. Contracts untouched; refunds promised.