Predict Fun on BNB Chain Drains About $300,000 Into Tornado Cash

Predict Fun Loses $300,000 Through Relay

About $300,000 in suspicious funds drained out of Predict.fun, a prediction market running on BNB Chain, on Tuesday, and part of that money had already crossed the Relay cross-chain bridge into the crypto mixer Tornado Cash before any official response appeared. On-chain monitoring account Onchain Lens raised the alarm at roughly 11:50 UTC on October 27, 19:50 in Taipei, calling the protocol “likely exploited” and charting a single trail: multiple source contracts tagged Kernel, relay wallets that received the money, and the RelayDeposit contract on Relay.link, entered almost immediately after. The bridge hop then appears to have carried the funds to the Ethereum side, where the trail ends at Tornado Cash. Most of the outflow was in USDT on BNB Smart Chain, the dollar-pegged stablecoin the platform uses for betting. The alert post and attached charts sized the suspicious total at about $300,000 and said it was still tracking additional addresses. The sequencing is notable: the contracts did not send funds straight to a bridge, but first passed them through an intermediary wallet, a step that separates the exploited contract from the laundering leg.

Predict.fun takes USDT stakes on political, sports and crypto market outcomes, so balances held inside the app sit on the loss surface alongside any protocol treasury. A mixer hop cuts recovery odds: once funds reach Tornado Cash, address-level tracing gives way to probabilistic clustering. The alert itself is a monitoring judgment, not a confirmed verdict, and that distinction held through Tuesday. No statement so far connects the incident to any move in the BNB price, and Onchain Lens is a monitoring account rather than an audit firm, so its figure is a running tally that can change as more addresses are confirmed.

Nineteen Victims and 105 ETH Counted

Victim-side evidence points at the same route. A user posting as dethective reported a loss of about $5,000 and published the receiving address that took the funds, 0x8b001D7378DBc19C1c62E39c0fC9FFAD84182fBa, consistent with the relay-then-bridge pattern the first alert described. A second tally from on-chain observer Naeven counted at least 19 victims linked to Predict.fun, with combined losses of about 105 ETH, roughly $260,000, also bridged to Ethereum and sent into Tornado Cash, and urged anyone still holding a balance to move it out at once. The observer's figure sits below the monitor's estimate, an easy gap to explain: it counts only addresses tied to named users, while the monitor traced every flagged contract. Community posts described a sharper failure mode, in-app wallets emptied while the separate signing wallets stayed untouched, and some posts named Privy, the embedded-wallet infrastructure provider, though that attribution is unverified. Predict.fun was founded by Dingaling, previously a research lead at Binance, with backing from YZi Labs, and collateral parked on the platform can also earn yield through lending protocols such as Venus while bets are open. As of Tuesday afternoon the @predictdotfun account had posted no statement, no downtime notice and no compensation commitment. Security firms including PeckShield, SlowMist and CertiK had not issued independent confirmations, and the platform's market pages were still browsable. The platform sits inside a BNB Chain ecosystem that has otherwise been expanding, from an L1 spec targeting 200-millisecond blocks to a treasury vehicle holding 515,544 BNB.

An Open Breach With No Post-Mortem

The two tallies, about $300,000 and roughly $260,000 in ETH, converge on one laundering route rather than two separate incidents, which strengthens the case for a single compromise behind the outflow. The reported detail that signing wallets stayed untouched while in-app balances were emptied points away from the settlement contracts and toward key handling inside the embedded wallet layer, though only the team can confirm that. The breach point itself remains open: no post-mortem exists, the official account is silent, no pause has been announced and the mixer exposure is unreported beyond what monitors have traced. Users with residual balances should move funds into self-custody, for example by connecting BNB Smart Chain to MetaMask, store them in an HD wallet they control, revoke stale approvals and apply basic DYOR checks instead of waiting for an announcement.