Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Polymarket (DebugBear script)
prediction market / web supply chain · Global (U.S.-linked platform)
What happened
DebugBear DNS records changed through its registrar (NameCheap, not Name.com), serving a malicious script on Polymarket.
About USD 2.7M drained from 726 wallets; Polymarket paid about USD 3.9M including about 1.19M halt compensation.
What remains unknown
- How the NameCheap account was compromised
Losses: USD 2.7M (Polymarket refund figure); covered by Polymarket
Capital around this company
- Listed investorInvestor portfolio pageManhattan West Asset Management, LLC
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
- Listed investorInvestor portfolio pageParafi Capital LP
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
- Listed investorInvestor portfolio pageRosecliff Venture Management, LLC
The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.
Sources
- Verisign RDAP debugbear.com (registrar NameCheap) (baseline) · 2026-11-02T14:56Z
- Polymarket DebugBear incident and compensation (baseline r_finance source) · 2026-10-31T20:33Z
Does Polymarket (DebugBear script) touch your portfolio?
We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.