SlowMist CISO: Beware of a Polymarket Front-Running Bot Stealing Private Keys

BlockBeats News, December 21st, SlowMist Chief Information Security Officer 23pds retweeted a community user's tweet to issue a security alert. The developer of a Polymarket copy-trading bot program, named "polymarket-copy-trading-bot," hid malicious code in the GitHub code. When the program is launched, it will automatically read the user's ".env" file (which contains the wallet private key), leading to fund theft. The author of this program repeatedly modified the code and intentionally hid the malicious payload in multiple GitHub code submissions.