Predict.fun, a BNB Chain prediction market, says unauthorized transfers from user wallets total approximately 400,000 USDT and has pledged full reimbursement. Its preliminary investigation points to a possible compromise of a third-party API documentation site. Onchain data cited by The Defiant shows a smaller traced subset.
Predict.fun, a BNB Chain prediction market, said on Oct. 27 that unauthorized transfers from user wallets totaled approximately 400,000 USDT. The platform pledged to reimburse affected users in full.
According to Predict.fun, "fully reimburse all affected users for any funds lost" was its commitment, stated in its X statement. However, it did not specify an exact affected-user count, a payout process or a reimbursement date.
Documentation site suspected as the entry point
Predict.fun said its preliminary investigation suggested that its API documentation site, hosted by a third-party provider, may have been compromised. The platform said the suspected compromise potentially affected a small number of users over a short period.
The company has taken the documentation site offline, and the site will stay unavailable until the investigation is complete. The statement sets no date for restoring access. Predict.fun also promised a full post-mortem explaining what happened and its prevention measures.
It has not yet explained how the suspected compromise enabled wallet transfers or which user interactions created exposure.
Onchain figures differ from the platform's tally
The operator's tally is higher than an earlier estimate by onchain analyst Naeven, who identified 19 victims and traced 105 ETH, valued at roughly $260,000. Naeven said there were likely more victims and that funds were being bridged to Ethereum and forwarded to Tornado Cash.
The figures measure different stages. Predict.fun described losses from user wallets in USDT, while Naeven tracked funds downstream in ETH. Separately, The Defiant calculated from BscScan histories that 147,395 USDT arrived from 17 distinct wallets on Oct. 27. The outlet describes this as a traced subset, not a complete loss tally.
In-app wallets draw attention
Predict.fun's documentation describes using Privy and ZeroDev to generate a smart contract wallet automatically when a user creates an account. One user, dethective, reported losing roughly $5,000 and said funds in his separate signing wallet were untouched.
Sources: The Defiant, crypto.news
Trading involves risk.
Risk Disclaimer
