Polymarket bug reportedly let identity thieves into existing accounts

According to the WSJ, nearly 500 Polymarket US users were hit by a passwordless attack in late July: registering with someone else's personal data let a fraudster into an existing profile with access to bank accounts. One user lost $5,783.51, and the company promised to cover losses.

• Nearly 500 Polymarket US users affected in late July
• Logging into another account required no password or phone
• One user lost $5,783.51 and received $25 compensation
• In February Checkout.com estimated theft attempts at least $10 million