Bits of Gold Reports Data Breach Linked to Global Cyber Incident Cryptocurrency platform Bits of Gold disclosed a cyber incident this week, revealing that customer data including full names, ID numbers, email addresses, phone numbers, and IP addresses was compromised in a breach several days prior. The stolen information could be exploited for phishing attacks, though the company confirmed that funds, passwords, ID scans, and credit card details remained secure. The breach originated from a third-party software provider used by Bits of Gold, part of a larger global cyberattack affecting hundreds of companies worldwide. While no other Israeli firms have been confirmed as impacted, investigators believe Bits of Gold was not directly targeted. In a customer notification, the company stated that unauthorized access to a support data analysis system was detected and swiftly blocked. A forensic review, conducted with external cybersecurity experts, is underway, and authorities have been notified. Digital assets and private keys were unaffected, and services continue operating normally. Exposed data may include bank account details and public crypto wallet addresses, though there is no evidence the information has been misused. Bits of Gold advised customers to remain cautious of phishing attempts, impersonation scams, and suspicious messages, emphasizing that the company will never request passwords, verification codes, or asset transfers. The incident underscores the risks of supply-chain attacks, where vulnerabilities in third-party vendors can cascade across multiple organizations. Further details on the scope and perpetrators remain under investigation.

Polymarket Hit by $3M Cyberattack Following Third-Party Security Flaw Polymarket, the world’s largest prediction market, confirmed a cyberattack that resulted in the theft of approximately $3 million in cryptocurrency. The breach stemmed from a security vulnerability in a third-party service provider, which allowed attackers to inject malicious scripts into the platform’s code. The incident, first reported by TechCrunch, targeted a specific segment of users rather than the entire user base. Blockchain security firm PeckShield and independent analysts revealed that the attack employed a phishing campaign, tricking users into approving fake transactions that drained funds from their wallets. At least 11 major investors were affected, with stolen assets transferred to hacker-controlled addresses. Polymarket has since regained control of the situation, pledging to fully refund all lost funds and directly contacting impacted users. The breach compounds recent reputational damage for Polymarket, which faced scrutiny earlier this week over deceptive marketing practices. Investigations uncovered that the platform paid social media influencers to promote fake winning videos, misleading users into believing they could replicate such gains. In response, Polymarket committed to an audit of its advertising content, though the cyberattack has further eroded trust in its security and ethical standards. As prediction markets gain traction ahead of high-profile events, the incident underscores the risks of third-party dependencies and the need for heightened vigilance in cryptocurrency transactions.