A significant security breach has occurred at Polymarket, resulting in the theft of millions of dollars in cryptocurrency from users. The exploit was made possible by a compromised third-party vendor, which hackers leveraged to gain unauthorized access to the website. As a consequence, Polymarket has announced plans to refund affected users. The incident highlights the risks associated with relying on third-party services, as a single vulnerability can have far-reaching consequences. The exact amount stolen has not been disclosed, but the company has confirmed that millions of dollars in crypto were taken1. This incident serves as a reminder of the importance of robust security measures and vendor risk management. The breach is a significant concern for users and organizations alike, as it demonstrates the potential for substantial financial losses due to vulnerabilities in third-party services, so it matters to practitioners who must prioritize securing their own systems and vendors to prevent similar incidents.