Prediction market platform Polymarket has confirmed that users affected by a phishing attack stemming from a compromised third-party vendor will be fully refunded. Blockchain analyst Specter estimated that attackers stole nearly $2.94 million worth of cryptocurrency from at least 11 wallets after a malicious script was injected into the platform's website. Polymarket said the affected dependency has been removed and described the incident as isolated.