Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Predict.fun

Security incidents tagged Predict.fun. Newest first.

1 Predict.fun incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
1
Days without an incident
6
Longest quiet run: 4 days (Oct 23–Oct 26)
  • MediumPredict.fun: about 400,000 USDT drained from user wallets; third-party API docs site suspected

    Predict.fun user smart wallets (BNB Chain) No fix needed

    On Oct 27 2026 the BNB Chain prediction market Predict.fun said a small number of users had unauthorized transfers from their wallets totaling about 400,000 USDT, and that its preliminary investigation points to a possible compromise of its API documentation site, hosted by a third-party provider. It took the docs site offline and promised to fully reimburse affected users and publish a post-mortem. Bitquery's on-chain analysis found 397,708 USDT taken from 29 accounts in two waves on Oct 22 and Oct 27, each transfer signed with the wallet's own owner key and no Predict.fun contract exploited, plus another 4,900 USDT drained about an hour after the statement.