🚨 PREDICT FUN GOT DRAINED: ~400,000 USDT GONE, FUNNELED STRAIGHT INTO TORNADO CASH Yesterday (Oct 27), users of BNB Chain prediction market @predictdotfun reported unauthorized wallet drains. What happened: - On-chain investigators traced the funds through intermediary wallets → Relay → Ethereum → Tornado Cash - @predictdotfun .fun confirmed about 400,000 USDT was lost from a small number of wallets - Early suspicion: a third-party-hosted API documentation site was compromised. The site has been taken offline The good: the platform pledged to fully reimburse users for direct losses and promised a detailed post-mortem. The catch: a docs site shouldn’t be able to touch user funds. How the attacker got from there to wallets is still unexplained. Some investigators are also looking at a possible embedded-wallet vulnerability, but nothing is confirmed. The lesson: the biggest risk isn’t only smart contracts, it’s the third-party services around them. Review your permissions and don’t keep too much in in-app wallets. Waiting on the post-mortem for the real root cause.