A user of the blockchain prediction market Polymarket fell victim to a theft of over $2 million in assets after being deceived by a fake webpage created by a hacker.

Regarding this incident, Polymarket Vice President of Engineering Josh Stevens stated through his X (formerly Twitter) account, "We are currently working with the victim and relevant exchanges to freeze the funds."

Explaining the details of the incident, Vice President Stevens said, "The victim was deceived by a fake webpage created by the hacker and entered a one-time password (OTP) for their Magic Link wallet (a simple wallet accessed via email link), after which the hacker withdrew the funds."

He then issued a warning to users and presented future countermeasures. Vice President Stevens added, "Users must be especially careful when accessing domains other than Polymarket," and "We are internally reviewing the implementation of additional features, such as multi-factor authentication (MFA), to strengthen account security."