BNB Chain-based prediction market Predict.fun allegedly hacked for $300,000

BNB Chain-based prediction market Predict.fun allegedly hacked for $300,000
Predict.fun faces suspected $300K exploit on BNB Chain

​Analysts have identified suspicious transfers totaling approximately $300,000 from smart contracts belonging to the Predict.fun prediction market on BNB Smart Chain. The funds moved through several wallets and the cross-chain service Relay before reaching the Tornado Cash crypto mixer.

On October 27, 2026, Onchain Lens analysts reported a possible exploit of the platform. According to their findings, the transactions involved multiple contracts, although the exact mechanism of the suspected attack remains unknown.

At the time of publication, the Predict.fun team had not publicly confirmed the incident. No independent technical reports have been released to establish the cause of the fund transfers or assess potential losses suffered by users.

Suspicious funds transferred across blockchains

According to Onchain Lens, the funds initially moved from several smart contracts to intermediary addresses. They were then routed through Relay, a service that enables assets to move between different blockchains.

Following the cross-chain transfer, the cryptocurrency was sent to Tornado Cash. The protocol is designed to mix transactions, making it more difficult to trace subsequent fund movements.

Researchers have not yet disclosed the full list of affected contracts or determined how the suspected attackers may have gained access to the assets.

Predict.fun has operated on BNB Chain since December 2025. The platform was launched by a team led by a former Binance researcher, with backing from investment firm YZi Labs and entrepreneur Changpeng Zhao.

A distinctive feature of the project is its integration with decentralized finance (DeFi) protocols. These integrations allow users to earn additional yield on funds deposited to participate in prediction markets.

Prediction markets face security threats

The possible Predict.fun incident has renewed attention to the risks associated with storing and transferring funds on such platforms. However, investigators have yet to determine whether the suspicious withdrawals resulted from a smart contract vulnerability or another mechanism.

Other industry participants have also faced security problems. In June 2026, Polymarket users were targeted in a phishing attack that resulted in the theft of approximately $2.94 million.

Polymarket representatives said at the time that they had contained the incident and pledged to fully compensate affected users. Unlike the suspected Predict.fun exploit, that incident was officially confirmed by the platform itself.

Earlier, we reported that Polymarket dismissed its head of marketing amid growing scrutiny of its corporate governance ahead of a potential IPO. The personnel decision came as discussions continued about the company's prospects for going public.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.