Following news that a Polymarket user suffered a hacking loss of over $2 million, Josh Stevens, VP of Engineering at Polymarket, stated on X, "We are currently working with the victim and relevant exchanges to freeze the funds. The victim was tricked into entering a one-time password (OTP) for their MagicLink wallet (a simple wallet accessed via an email link) on a fake webpage created by the hacker, after which the hacker withdrew the funds." He added, "Users should exercise extreme caution when accessing domains that are not Polymarket. We are internally reviewing the introduction of additional features, such as multi-factor authentication (MFA), to strengthen account protection."