{
  "checkedUTC": "2026-10-31 08:33:49 UTC",
  "sourceURL": "https://hacked.slowmist.io/?c=Polygon",
  "sourceRole": "Additional public incident registry, not an underlying actor-control record.",
  "registryCapture": {
    "HTTP": 200,
    "bytes": 25978,
    "SHA256": "e066025948b8d1cb98b9d948176794b931d137b083b02eccfdf44a60bdce500a"
  },
  "entries": [
    {
      "date": "2026-10-29",
      "title": "Polymarket International",
      "reference": "https://x.com/PolymarketTrade/status/2115874609014726842",
      "finding": "Registry classifies the incident as a supply-chain attack and names DebugBear; its sole linked reference is the platform's already-known official announcement.",
      "newOriginalEvidence": false
    },
    {
      "date": "2026-05-22",
      "title": "Polymarket",
      "reference": "https://x.com/devjoshstevens/status/2057768173915484505",
      "finding": "The author-bound returned preview describes an old operational key compromise. No wallet or transaction pointer appears in the returned preview; full long-note text is not recovered.",
      "newCurrentIncidentControlEvidence": false
    },
    {
      "date": "2025-11-11",
      "title": "Polymarket",
      "reference": "https://x.com/25usdc/status/1987948736228511992",
      "primaryPostCreatedUTC": "2025-11-10T18:21:27.000Z",
      "finding": "The primary-linked media show a comment-based private-market lure and a fake verification screen asking a Mac user to run a terminal command. This is a different delivery technique from the confirmed October29 supplier script.",
      "mediaInspected": true,
      "visibleWalletOrTransaction": false,
      "phishingDomain": "Redacted in the source image; no recovery or live endpoint fetch attempted.",
      "newCurrentIncidentControlEvidence": false
    }
  ],
  "primaryTextCoverage": "The three exact first-party syndication responses bind numeric IDs, authors and creation dates, but expose previews and note IDs rather than complete long-note bodies. Two oEmbed responses are additional preview renderings; formatting differences are not new original text. Three direct X opens403.",
  "attribution": "No common wallet, actual key, tenant-control, code-author or coordination edge to Car is recovered. Older incidents or similar platform targets do not establish the same actor.",
  "publication": "Curated source URLs, facts and hashes only. Full registry HTML, post responses and media remain local."
}