{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected · updates",
  "home_page_url": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026",
  "feed_url": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026/feed.json",
  "description": "On Oct 27 2026 the BNB Chain prediction market Predict.fun said a small number of users had unauthorized transfers from their wallets totaling about 400,000 USDT, and that its preliminary investigation points to a possible compromise of its API documentation site, hosted by a third-party provider. It took the docs site offline and promised to fully reimburse affected users and publish a post-mortem. Bitquery's on-chain analysis found 397,708 USDT taken from 29 accounts in two waves on Oct 22 and Oct 27, each transfer signed with the wallet's own owner key and no Predict.fun contract exploited, plus another 4,900 USDT drained about an hour after the statement.",
  "language": "en",
  "_pwn": {
    "slug": "predict-fun-user-wallet-drain-400k-usdt-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "no-fix-needed",
    "rss": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-27-9e26645f",
      "url": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-27-9e26645f",
      "title": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: Second wave: 272,679 USDT drained; Predict.fun confirms about 400,000 USDT in unauthorized transfers, suspects its third-party-hosted API docs site and takes it offline.",
      "content_text": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: Second wave: 272,679 USDT drained; Predict.fun confirms about 400,000 USDT in unauthorized transfers, suspects its third-party-hosted API docs site and takes it offline.\n\nSource: https://x.com/predictdotfun/status/2115089547528950108",
      "date_published": "2026-10-27T00:00:00.000Z",
      "external_url": "https://x.com/predictdotfun/status/2115089547528950108",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-27-7237fc64",
      "url": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-27-7237fc64",
      "title": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: Predict.fun pledges to fully reimburse affected users' direct losses and publish a post-mortem; another 4,900 USDT is drained about an hour after its statement.",
      "content_text": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: Predict.fun pledges to fully reimburse affected users' direct losses and publish a post-mortem; another 4,900 USDT is drained about an hour after its statement.\n\nSource: https://www.tokenpost.com/news/technology/42298",
      "date_published": "2026-10-27T00:00:00.000Z",
      "external_url": "https://www.tokenpost.com/news/technology/42298",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-22-afdbc2db",
      "url": "https://pwn.watch/i/predict-fun-user-wallet-drain-400k-usdt-oct-2026#2026-10-22-afdbc2db",
      "title": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: First wave: 125,029 USDT moved out of user accounts, per on-chain analysis (not publicly reported at the time).",
      "content_text": "Predict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected: First wave: 125,029 USDT moved out of user accounts, per on-chain analysis (not publicly reported at the time).\n\nSource: https://bitquery.io/investigations/predict-fun-hack",
      "date_published": "2026-10-22T00:00:00.000Z",
      "external_url": "https://bitquery.io/investigations/predict-fun-hack",
      "tags": [
        "medium"
      ]
    }
  ]
}