predict.fun suffered a security incident: its third-party-hosted API documentation website was suspected of being compromised, resulting in unauthorized transfers from a small number of users’ wallets and total losses of approximately 400,000 USDT. The affected documentation website has been taken offline and will remain closed until the investigation is complete.
Notably, the attack did not enter through the main website, but through third-party documentation infrastructure that can easily be overlooked. This is a further reminder to projects that supply chains, subdomains, and documentation systems can also become points of entry that put assets at risk. predict.fun has pledged to fully reimburse users directly affected by the incident and will publish a complete post-incident report once the investigation is finished.
If ordinary users notice anything unusual, they should verify it through official channels immediately, move their assets, and check their wallet approvals. Never click unfamiliar links in direct messages or comments. Key details to watch for in the follow-up report include the intrusion path, scope of impact, and subsequent security measures.
#Web3安全 #安全事件 #PredictFun
Notably, the attack did not enter through the main website, but through third-party documentation infrastructure that can easily be overlooked. This is a further reminder to projects that supply chains, subdomains, and documentation systems can also become points of entry that put assets at risk. predict.fun has pledged to fully reimburse users directly affected by the incident and will publish a complete post-incident report once the investigation is finished.
If ordinary users notice anything unusual, they should verify it through official channels immediately, move their assets, and check their wallet approvals. Never click unfamiliar links in direct messages or comments. Key details to watch for in the follow-up report include the intrusion path, scope of impact, and subsequent security measures.
#Web3安全 #安全事件 #PredictFun