According to an official disclosure from predict.fun, its third-party-hosted API documentation website appears to have been attacked, resulting in unauthorized transfers from a small number of users’ wallets and total losses of approximately 400,000 $USDT. The impact is currently limited in scope and the time window was short. The documentation website has been taken offline and will remain closed until the investigation is complete.
The project team said it will fully compensate users who suffered direct losses in this incident and publish a comprehensive postmortem report after the investigation, detailing how the attack occurred and the measures being taken to prevent future incidents.
This incident is another reminder that even when a main website appears secure, third-party documentation, subdomains, and plugins can become points of entry. Users should be cautious when connecting their wallets, regularly review their authorizations, and verify announcements through official channels. Do not trust suspicious links or scripts embedded in documentation pages.
#Web3安全 #predictfun
The project team said it will fully compensate users who suffered direct losses in this incident and publish a comprehensive postmortem report after the investigation, detailing how the attack occurred and the measures being taken to prevent future incidents.
This incident is another reminder that even when a main website appears secure, third-party documentation, subdomains, and plugins can become points of entry. Users should be cautious when connecting their wallets, regularly review their authorizations, and verify announcements through official channels. Do not trust suspicious links or scripts embedded in documentation pages.
#Web3安全 #predictfun