predict.fun Hack — ~$400K USDT Drained via Compromised API Docs
Prediction market platform predict.fun disclosed unauthorized transfers of approximately $400,000 USDT from user wallets, with preliminary findings pointing to a compromised third-party API documentation site as the attack vector.
What we know
An account on X posted an official disclosure: 'We are aware of a small number of users who have experienced unauthorized transfers of funds from their wallets, totaling approximately 400,000 USDT. Our preliminary investigation suggests that our API documentation site, which is hosted by a third-party provider, may have been [compromised].' This follows a broader pattern of supply-chain attacks targeting developer documentation platforms. No further details on the specific vulnerability have been confirmed yet.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.