finance.yahoo.com Hackers Steal $400,000 from Binance-Linked Predict.fun
Article Content
- •Attackers stole $400,000 from Predict.fun via API documentation exploitation.
- •Predict.fun will reimburse all affected users, but the number of impacted accounts is unknown.
- •The breach occurred shortly after Binance began trading on Predict.fun's token.
On October 25, 2026, attackers drained $400,000 in USDT from users of Predict.fun, a prediction market integrated into Binance's wallet app. The breach occurred just two days after Binance began trading on Predict.fun's token, valued at $1.43 billion. Initial investigations suggest the attackers exploited a vulnerability in the API documentation site, which was managed by an external company and has since been taken offline. Predict.fun has committed to fully reimbursing affected users, although the exact number of impacted accounts remains undisclosed. This incident follows a similar breach in June involving rival platform Polymarket, which also promised refunds after a significant loss. Analysts are now scrutinizing the inflated valuation of Predict.fun's token, which is reportedly several times higher than comparable projects. The incident raises questions about the security of third-party integrations in cryptocurrency platforms.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many users were affected?
What steps is Predict.fun taking?
What vulnerabilities were exploited?
Continue Reading
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…
KeyDrift Malware Exploits Cisco SD-WAN Flaw CVE-2026-20127 Cisco Talos reported that the advanced persistent threat group UAT-11473 exploited a critical authentication bypass vulnerability (CVE-2026-20127) in Cisco SD-WAN Catalyst Controllers. This flaw, which has a CVSS score of 10.0, allows unauthorized remote access to administrative privileges. The group deployed a custom…