Polymarket said a third party vendor compromise enabled a phishing attack that stole about $2.94 million from at least 11 user wallets.The platform removed the malicious dependency, contained the incident and said all affected users will receive full refunds.DefiLlama recorded the attack as the 89th crypto security breach of the second quarter, the highest quarterly total by incident count on its records.