Predict.fun Loses $397,708 in User Wallets Due to Compromised API
Predict.fun experienced a loss of approximately 397,708 USDT from user wallets due to a compromised private key. The incident involved two waves of draining from 29 smart wallets on the BSC chain.
Predict.fun, a prediction market on the BNB Chain, reported a significant incident where around 397,708 USDT was drained from 29 user smart wallets. This occurred in two separate waves on October 22 and 27, 2026. The drains were executed using the compromised private keys of the wallet owners, and it was noted that no protocol contracts were exploited during the incident.
The team behind Predict.fun attributed the breach to a compromised third-party API documentation site, which they have since taken offline. As a response to the incident, they have pledged to fully reimburse the affected users and are preparing a comprehensive post-mortem to detail the events and findings.
The incident highlights the risks associated with third-party services and the importance of securing private keys. The loss occurred on the BSC chain, which allows for tracking of transactions related to the affected wallets, although specific addresses were not disclosed in the report.