Polymarket wallet drainer served from DebugBear's script CDN
On 29 October 2026 the DebugBear monitoring script Polymarket loaded was replaced with a wallet drainer. In 52 minutes its recipient wallet took in 28,636,284.45 POL and positions from 33 accounts, and it had forwarded everything by 18:38 UTC.