Predict.fun says about 400,000 USDT was taken from a small number of user wallets and suspects its third-party-hosted API documentation site was briefly compromised; it promises full refunds
BNB Chain prediction market Predict.fun said on Oct 27 that a small number of users saw unauthorized transfers from their wallets totaling about 400,000 USDT. Its preliminary investigation points to its API documentation site, hosted by a third-party provider, which may have been compromised for a short period. The site has been taken offline until the investigation ends. The company says it will fully reimburse funds lost as a direct result of the incident and will publish a post-mortem.
It has not explained how a documentation site led to wallet drains, for example whether a malicious script or altered instructions were served to developers. On-chain researchers cited in press coverage counted about 19 affected wallets, with funds bridged to Ethereum and sent through Tornado Cash; that tracing is not confirmed by the company. If you used Predict.fun's API docs recently: treat any API key, private key or signing setup you copied or ran from them as exposed, rotate it and move funds to a fresh wallet.
Sources: Predict.fun on X: statement on unauthorized transfers (Oct 27) · crypto.news: Predict.fun confirms 400,000 USDT theft, promises full refunds (Oct 27)