Beware! A certain Polymarket copy trading bot contains malicious code that automatically steals wallet Private Keys.

[Coin World] Recently, a rather dangerous thing has been circulating in the security circle — a developer of a Polymarket copy trading bot embedded malicious code in the GitHub repository.

The situation is as follows: once the user starts this program, it will automatically scan your “.env” file (where wallet private keys are usually stored) and then secretly send the private keys to the hacker's server. The result is that the funds are completely drained. What's worse is that this guy knows what bad things he has done and repeatedly modifies the code, submitting it multiple times to GitHub, trying to hide the malicious package even deeper.

The information security experts at Slow Mist Technology point out that this kind of trick has been seen more than once. When using open-source code or third-party tools, one really needs to be cautious. Especially for programs related to trading and wallets, it is essential to check the source code before downloading, or at least test it in an isolated environment first. Such attack methods will continue to emerge, and our awareness of prevention needs to keep up.