predict.fun security incident: The attack targeted not the main website, but an API documentation site hosted by a third-party service provider.
The project team said that a small number of users’ wallets experienced unauthorized transfers, with total losses of around $400,000 in USDT. The impact was limited in scope and duration. The documentation site has been taken offline and will remain closed until the investigation is complete. The team has pledged to fully compensate directly affected users and publish a full report afterward.
This incident is another reminder that malicious links or scripts can be injected even into documentation pages. Before using a DApp, verify the domain, be cautious when signing approvals, and regularly review and revoke unnecessary wallet permissions. Consider storing large amounts of assets separately, and avoid leaving unlimited approvals active in a single wallet for extended periods.
#Web3安全 #WalletSecurity
The project team said that a small number of users’ wallets experienced unauthorized transfers, with total losses of around $400,000 in USDT. The impact was limited in scope and duration. The documentation site has been taken offline and will remain closed until the investigation is complete. The team has pledged to fully compensate directly affected users and publish a full report afterward.
This incident is another reminder that malicious links or scripts can be injected even into documentation pages. Before using a DApp, verify the domain, be cautious when signing approvals, and regularly review and revoke unnecessary wallet permissions. Consider storing large amounts of assets separately, and avoid leaving unlimited approvals active in a single wallet for extended periods.
#Web3安全 #WalletSecurity