[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

confirmed by the company (Predict.fun statement on X, Oct 27); root cause preliminary; attack method not disclosed

Predict.fun says about 400,000 USDT was taken from a small number of user wallets and suspects its third-party-hosted API documentation site was briefly compromised; it promises full refunds

BNB Chain prediction market Predict.fun said on Oct 27 that a small number of users saw unauthorized transfers from their wallets totaling about 400,000 USDT. Its preliminary investigation points to its API documentation site, hosted by a third-party provider, which may have been compromised for a short period. The site has been taken offline until the investigation ends. The company says it will fully reimburse funds lost as a direct result of the incident and will publish a post-mortem.

It has not explained how a documentation site led to wallet drains, for example whether a malicious script or altered instructions were served to developers. On-chain researchers cited in press coverage counted about 19 affected wallets, with funds bridged to Ethereum and sent through Tornado Cash; that tracing is not confirmed by the company. If you used Predict.fun's API docs recently: treat any API key, private key or signing setup you copied or ran from them as exposed, rotate it and move funds to a fresh wallet.

Sources: Predict.fun on X: statement on unauthorized transfers (Oct 27) · crypto.news: Predict.fun confirms 400,000 USDT theft, promises full refunds (Oct 27)