AMLBot Reports $3.1 Million PUSD Stolen From Polymarket Users on Polygon After Front-End Script Attack

Blockchain intelligence firm AMLBot said Polymarket users on the Polygon network recently had about $3.1 million in PUSD stolen after the platform’s front end was compromised by a malicious script. According to ChainCatcher, the attacker implanted a script that prompted users to sign authorization transactions involving EIP-7702 delegated execution, which resulted in affected wallets being drained. AMLBot said the stolen funds were routed through Relay, converted into USDC.e, bridged to Ethereum, and then swapped into ETH and consolidated to a designated address. It added that about 1,891.9 ETH is currently spread across three newly created wallets. AMLBot compared the incident to a 2024 attack on the 1inch web application, where a compromised Lottie Player library was used to inject wallet-draining code, describing both cases as third-party script breaches that led to front-end contamination.