Predict.fun Says $400,000 Was Stolen From User Wallets, Pledges Full Refunds

The BNB Chain prediction market blames a possible breach of its outside-hosted API documentation site, after users and on-chain sleuths traced drained funds to Tornado Cash.

Francis Gable

27/10/26 · 2 minOctober 27, 2026 · 2 min read

Predict.fun said on Oct. 27 that about 400,000 USDT was taken from a small number of user wallets without permission. The prediction market promised to repay every affected user in full.

USDT is a stablecoin pegged to the U.S. dollar, so the loss comes to roughly $400,000 of user money. The platform runs on BNB Chain, and Binance Wallet opened it to its users in April, according to multiple industry reports. Its own preliminary explanation points away from its betting contracts and toward a website for developers, a reminder that bettors can lose funds through parts of a platform they never touch.

Users Flag the Drain Hours Before Predict.fun Responds

The first warning came from X user dethective, who posted at about 4 a.m. ET that roughly $5,000 had been drained an hour earlier, and that other victims seemed tied to Predict.fun.

On-chain investigator Naeven then identified 19 victims who had lost a combined 105 ETH, about $260,000. Naeven wrote that the funds were being moved to Ethereum and sent to Tornado Cash. That is a mixer, a service that blends deposits to hide where coins came from.

Naeven told anyone with money still on the platform to move it out. Analytics account Onchain Lens separately estimated the outflow at about $300,000, according to multiple reports.

Predict.fun Points to Its Documentation Site

Predict.fun responded at about 10:30 a.m. ET. It said its API documentation site, run by an unnamed third-party provider, may have been compromised for a short period.

"We will fully reimburse all affected users for any funds lost as a direct result of this incident."

Predict.fun made that pledge in the same post. It also took the documentation site offline until its investigation ends, but it has not explained how an attacker could reach user wallets through that site.

Polymarket made a similar full-refund pledge in June after a compromised outside vendor exposed some of its users, according to multiple industry reports.

Predict.fun has promised a full post-mortem once its investigation is complete. It has not said when that report or the refunds will arrive.

Treat gambling as entertainment you pay for. 18+, and if it stops feeling like entertainment, help exists at BeGambleAware and GamCare.