Cryptocurrency [loss] $45M+

"Binance Smart Chain's PancakeBunny protocol exploited, $45 million drained"

2021-05-19 [vendor] PancakeBunny [chain] bsc
Primary Source ↗
Financial Loss $45.0M (45,000,000 USD)
Blockchain(s) Bsc

Incident Details

A hacker used flash loans to manipulate the price of other token pools, to then exploit a bug in PancakeBunny logic that calculates how many tokens should be minted. They were able to mint and then sell 7 million tokens, making off with $45 million and tanking the price of BUNNY tokens from $146 to $0.90. PancakeBunny tweeted shortly after the attack that they would be “working on a reimbursement plan” for those affected.

Total loss estimated at $45,000,000.

Technical Details

Initial Attack Vector
Flash loan attack on smart contract
Vendor / Product
PancakeBunny

Timeline

  1. 2021-05-19 Breach occurred
  2. 2021-05-19 Publicly disclosed