Frontend Hijack attacks in 2026

A compromise of monitoring vendor DebugBear injected malicious JavaScript into Polymarket's international frontend, draining about $2.7M in POL from roughly 700 wallets.

A compromised third-party vendor injected a malicious script into Polymarket's frontend, phishing approvals that drained about $2.94M in PUSD from user wallets.

DPRK social-engineers tricked Drift Security Council members into blind-signing durable-nonce txs that handed over admin control, draining $285M on Solana.