A phishing attack targeting Polymarket users resulted in nearly $3 million in stolen funds after malicious code was injected into the platform’s frontend through a third-party vendor. The incident has intensified concerns over wallet security, vendor dependencies, and growing risks across the DeFi ecosystem.