Seed phrase and hardware wallet safety: the words that guard your crypto
Your seed phrase is the master key to your wallet: anyone who sees it can take everything, and if you lose it, nobody can restore it. A hardware wallet keeps keys offline, but only if the phrase stays offline too and the device is genuine.
Polymarket repaid $3.9 million after a vendor's script turned on its users. What broke?
A hijacked performance-monitoring script on polymarket.com used logged-in sessions to sell positions and pull funds. Polymarket's postmortem says 95% of affected wallets are now fully refunded, and it paid $1.2 million more for losses during its trading pause.
Polymarket repays $3.9 million after a hacked vendor script hits it for the second time
On October 29, a compromised outside script on polymarket.com used logged-in sessions to sell positions and drain 726 wallets. Polymarket paused trading, repaid 689 of them in full within a day, and is covering pause losses too. It was the second vendor script attack in four months.
A spy chip in the box: $86.96 million drained from Ledgers sold by one reseller
Ledger says an implant hidden inside devices sold by Southeast Asian reseller CryptoBilis read the 24-word recovery phrase off the screen and sent it out over a mobile network. DeepSea puts the losses at $86.96 million. Ledger has confirmed no total.