Predict.fun Users Report $260,000 Loss in Targeted Wallet Drain

The security incident surfaced on October 27 after a user known as dethective reported the unauthorized withdrawal of $5,000 from their account. Naeven’s subsequent analysis revealed that the breach was far broader, identifying 19 distinct victim addresses. The investigator warned that the total number of compromised wallets could climb higher and advised those currently holding funds on the platform to withdraw their assets immediately.

While the investigation into the technical failure is ongoing, experts have yet to confirm whether the attack stemmed from compromised permissions, malicious signatures, or a vulnerability within the platform's smart contracts. The stolen capital was moved through a series of intermediary wallets, transitioning across chains before ultimately reaching the Tornado Cash mixer to obscure the transaction history. Predict.fun, which operates on the BNB Smart Chain, uses conditional token contracts to manage its prediction markets, but the specific entry point for the drainer remains unidentified.