---
title: Predict.fun says about 400,000 USDT was taken from a small number of user wallets and suspects its third-party-hosted API documentation site was briefly compromised; it promises full refunds | ctxsec
url: https://ctxsec.com/items/predict-fun-400k-usdt-unauthorized-transfers-docs-site
description: ""
status: "confirmed by the company (Predict.fun statement on X, Oct 27); root cause preliminary; attack method not disclosed"
published: 2026-10-27
---

> 

[← Cybersecurity News](/news) · [markdown](/items/predict-fun-400k-usdt-unauthorized-transfers-docs-site.md)

confirmed by the company (Predict.fun statement on X, Oct 27); root cause preliminary; attack method not disclosed

2026-10-27

### Predict.fun says about 400,000 USDT was taken from a small number of user wallets and suspects its third-party-hosted API documentation site was briefly compromised; it promises full refunds

BNB Chain prediction market **Predict.fun** said on Oct 27 that a small number of users saw unauthorized transfers from their wallets totaling about **400,000 USDT**. Its preliminary investigation points to its **API documentation site, hosted by a third-party provider**, which may have been compromised for a short period. The site has been taken offline until the investigation ends. The company says it will fully reimburse funds lost as a direct result of the incident and will publish a post-mortem.

It has not explained how a documentation site led to wallet drains, for example whether a malicious script or altered instructions were served to developers. On-chain researchers cited in press coverage counted about 19 affected wallets, with funds bridged to Ethereum and sent through Tornado Cash; that tracing is not confirmed by the company. **If you used Predict.fun's API docs recently:** treat any API key, private key or signing setup you copied or ran from them as exposed, rotate it and move funds to a fresh wallet.

Sources: [Predict.fun on X: statement on unauthorized transfers (Oct 27)](https://x.com/predictdotfun/status/2115089547528950108) · [crypto.news: Predict.fun confirms 400,000 USDT theft, promises full refunds (Oct 27)](https://crypto.news/predict-fun-400000-usdt-theft-refunds/)