Woofun AI reports that a front-end malicious script attack on the Polygon network resulted in the theft of approximately $3.1 million in PUSD from Polymarket users. Attackers implanted code that tricked victims into signing authorization transactions involving EIP-7702 delegated execution, leading to wallet drainage.

The stolen assets were converted to USDC.e via Relay, bridged to Ethereum, and swapped for ETH. Currently, roughly 1891.9 ETH is distributed across three new wallets. This incident mirrors the 2024 1inch web application breach, where a compromised Lottie Player library facilitated similar front-end contamination.