Predict Fun Hack

On October 27, 2026, BNB Chain prediction market Predict.fun suffered a security incident resulting in approximately $397,708 USDT being drained from 29 user smart wallets (Kernel/ZeroDev-based). Core protocol contracts remained unexploited, with unauthorized fund transfers executed using compromised user private keys.

The incident unfolded in two waves targeting user smart wallets on BNB Chain. On-chain investigations confirmed that each withdrawal transaction was authorized and signed directly with the respective owner's private key. The project team attributed the compromise to a suspected security breach on their third-party hosted API documentation site, prompting them to take the portal offline as a precautionary measure.

Stolen funds were subsequently laundered through Tornado Cash and Railgun. The team issued a public statement pledging full reimbursement to all affected users, pending a complete post-mortem investigation.