The Smart Contracts Worked. Why Did 737 Accounts Still Lose $2.73 Million?
A third-party script was compromised, while Polymarket's normal infrastructure executed the operations as authorized. We examine how this could happen and where smart-contract security ends.