Related?
https://ohey.ca/research/polymarket-debugbear-wallet-drainer...
https://x.com/DebugBear/status/2115866496643535293
Maybe: https://www.binance.com/en/square/post/10-29-2026-suspected-...
As of now, DebugBear webite has been taken offline: https://www.debugbear.com/
And they just posted on Twitter: https://x.com/DebugBear/status/2115930681398239278
From what I've read, DebugBear is related to the Polymarket hack, not Binance.
I don't think so. Both happened the same time but unrelated. Just a good haul for hackers end of the year.
If there were only a way to pin external deps loaded from html by sha…
That's not much help if you don't vet all third-party dependencies closely, ideally at the source level pre obfuscation/minification.
Who loads foreign JS from a CDN into a site handling finances? WTF, the crypto world always manage to make me speechless.
Maybe: https://www.binance.com/en/square/post/10-29-2026-suspected-...
As of now, DebugBear webite has been taken offline: https://www.debugbear.com/
And they just posted on Twitter: https://x.com/DebugBear/status/2115930681398239278
From what I've read, DebugBear is related to the Polymarket hack, not Binance.
I don't think so. Both happened the same time but unrelated. Just a good haul for hackers end of the year.
If there were only a way to pin external deps loaded from html by sha…
That's not much help if you don't vet all third-party dependencies closely, ideally at the source level pre obfuscation/minification.
Who loads foreign JS from a CDN into a site handling finances? WTF, the crypto world always manage to make me speechless.