{"investigation":{"slug":"bunny","entity_name":"Bunny Finance","trust_score":44,"severity_base":44,"score_modifier":0,"confidence":0.88,"status":"published","content_type":"investigation","summary":"PancakeBunny (also known as Bunny Finance) was a Binance Smart Chain yield aggregator developed by the anonymous team MOUND (Mound Inc.), which received a $1.6 million seed round led by Binance Labs in April 2021. The protocol suffered a roughly $45 million flash loan attack in May 2021 and a $2.4 million exploit of its Polygon fork polyBUNNY in July 2021, and the same team's Qubit Finance lost about $80 million in January 2022, for more than $127 million across three incidents. The BUNNY token has lost over 99% of its value, development has largely ceased, and no stolen funds have been publicly confirmed as recovered.","sections":[{"content":"On May 19-20, 2021 (dated May 20, 2021 in one account), PancakeBunny on the Binance Smart Chain suffered a flash loan attack with an estimated loss of $45 million. The attacker borrowed about 2.3 million BNB/WBNB (roughly $700 million) recursively across seven PancakeSwap pools (PancakePair contracts) and ForTube Bank, one account counting eight loans including 2.96 million USDT. The funds were deposited into the WBNB/BUSDT pool, minting 144,450 LP tokens, and large swaps distorted the pool reserve ratios.\n\nThe core flaw was that the protocol's priceCalculator.valueOfAsset() function used reserve balances from an on-chain pool (the BUNNY-BNB PancakePair) as its price source rather than a trusted external oracle, making it manipulable by large swaps. The distorted prices caused the reward logic (getReward() and the VaultFlipToFlip system, with an amplification factor of five in amountBunnyToMint()) to mint vastly inflated BUNNY amounts. Accounts differ on the quantity: approximately 697,000 BUNNY (worth roughly $1 billion at manipulated prices) versus approximately 6.9-7 million BUNNY. The attacker dumped the tokens, repaid the flash loans and netted about 114,631 WBNB (~$45 million) in one account, or about 104,000 WBNB plus 3.8 million USDT (roughly $45 million) in the other. The BUNNY price collapsed from about $145-146 to as low as $6.17 within minutes, a fall of more than 95%. Reported impact: total market capitalization loss of about $200 million, and protocol TVL falling from over $10 billion to about $1 billion. Halborn called the root vulnerability a 'common mistake in DeFi'. The incident placed joint third on the rekt.news leaderboard at the time. The team described it as an 'economic exploit' rather than a direct smart contract breach.","heading":"May 2021 Flash Loan Attack on PancakeBunny (BSC), approx. $45 Million","sources":[{"url":"https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-defi-token-bunny-to-crash-over-95","name":"CoinDesk — Flash Loan Attack Causes DeFi Token BUNNY to Crash Over 95%","type":"news_article","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-pancakebunny-protocol-hack-may-2021","name":"Halborn — Explained: The PancakeBunny Protocol Hack (May 2021)","type":"research","credibility":3},{"url":"https://cointelegraph.com/news/pancakebunny-tanks-96-following-200m-flash-loan-exploit","name":"CoinTelegraph — PancakeBunny tanks 96% following $200M flash loan exploit","type":"news_article","credibility":3},{"url":"https://decrypt.co/71585/pancakebunny-defi-exploit","name":"Decrypt — PancakeBunny DeFi exploit","type":"news_article","credibility":3},{"url":"https://rekt.news/pancakebunny-rekt","name":"Rekt News — PancakeBunny","type":"research","credibility":3},{"url":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","name":"Amber Group (Medium) — BSC Flash Loan Attack: PancakeBunny","type":"research","credibility":3},{"url":"https://beincrypto.com/pancakebunny-attacked-massive-200m-flash-loan-exploit/","name":"BeInCrypto — PancakeBunny attacked in massive $200M flash loan exploit","type":"news_article","credibility":3},{"url":"https://cmichel.io/bsc-pancake-bunny-exploit-post-mortem/","name":"cmichel — BSC Pancake Bunny exploit post-mortem","type":"research","credibility":3},{"url":"https://cryptopotato.com/pancake-bunny-exploit-44-million-stolen-as-bunny-token-crashed-99-in-seconds/","name":"CryptoPotato — Pancake Bunny exploit","type":"news_article","credibility":3}],"severity":"high"},{"content":"The May 2021 exploit was followed by attacks on forked BSC protocols sharing the same vulnerable design. AutoShark (around May 25, 2021), Merlin Labs and PancakeHunny (around May 26, 2021) were exploited using the same or similar oracle manipulation techniques; Merlin Labs lost approximately 240 ETH (~$680,000). One account reads this as a systemic risk in the BSC DeFi ecosystem of the period, where protocols frequently forked codebases without fully understanding inherited vulnerabilities. Amber Group's security team published post-mortems of the PancakeBunny attack and the three copycat exploits.","heading":"Contagion: Exploits of PancakeBunny Forks","sources":[{"url":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","name":"Amber Group (Medium) — BSC Flash Loan Attack: PancakeBunny","type":"research","credibility":3},{"url":"https://rekt.news/merlinlabs-rekt","name":"Rekt News — Merlin Labs","type":"research","credibility":3},{"url":"https://thefinancialanalyst.net/2021/07/24/bsc-flash-loan-attack-the-three-copycats/","name":"The Financial Analyst — BSC flash loan attack: the three copycats","type":"news_article","credibility":3}],"severity":"medium"},{"content":"On July 16, 2021, less than two months after the BSC exploit, PancakeBunny's Polygon fork polyBUNNY (using QuickSwap as its DEX) was hit by a near-identical flash loan attack. The attacker took an Aave flash loan of roughly $48 million, deposited about $19,203 into a vault, and deposited about $47.99 million directly into SushiSwap's MiniChefV2 contract. On withdrawAll, the VaultSushiFlipToFlip logic incorrectly counted the MiniChefV2 balance as earned performance fees/collateral, minting about 2.1 million polyBUNNY tokens (2,136,672 in one account). The attacker converted these to about 1,281 ETH (roughly $2.4 million) and repaid the loan. The polyBUNNY price fell from about $10 to $1.78 (about 82%). Rekt.news reported that an identical exploit had been used against ApeRocketFi, a PancakeBunny fork, two days earlier (July 14, 2021), which raised questions about why the team did not apply mitigations before launching on Polygon. The BSC version was not directly affected. The team announced $2.4 million in compensation to polyBUNNY holders, paid in MND tokens, and on July 21, 2021 said it would slow release cadence and add testnet deployments, bounty programs and multi-layer code reviews.","heading":"July 2021 polyBUNNY Exploit on Polygon, approx. $2.4 Million","sources":[{"url":"https://rekt.news/pancakebunny2-rekt","name":"Rekt News — PancakeBunny (polyBUNNY exploit)","type":"research","credibility":3},{"url":"https://cryptoslate.com/bsc-defi-app-pancakebunny-releases-post-mortem-of-2-4-million-exploit/","name":"CryptoSlate — PancakeBunny releases post-mortem of $2.4 million exploit","type":"news_article","credibility":3},{"url":"https://beincrypto.com/polybunny-finance-releases-2-4m-defi-attack-post-mortem-report/","name":"BeInCrypto — polyBUNNY Finance releases $2.4M DeFi attack post-mortem report","type":"news_article","credibility":3},{"url":"https://pancakebunny.medium.com/polybunny-post-mortem-compensation-42b5c35ce957","name":"PancakeBunny (Medium) — polyBUNNY post-mortem and compensation","type":"official","credibility":3},{"url":"https://binancechain.news/pancakebunny-hit-with-another-flash-loan-exploit-this-time-on-polygon/2021/07/19/","name":"Binance Chain News — PancakeBunny hit with another flash loan exploit on Polygon","type":"news_article","credibility":3},{"url":"https://pancakebunny.medium.com/polybunny-pbunny-mnd-compensation-cee3d5883ae6","name":"PancakeBunny (Medium) — polyBUNNY, pBUNNY and MND compensation","type":"official","credibility":3}],"severity":"high"},{"content":"On January 27, 2022, Qubit Finance, a BSC-based cross-chain lending protocol built and operated by the same MOUND team as PancakeBunny, was exploited for about $80 million through QBridge, its Ethereum-BSC bridge. A legacy deposit function remained in the QBridge ETH contract alongside its replacement. The attacker called it with malicious data that passed the checks without attaching any ETH; the contract's custom safeTransferFrom() used a low-level call() to the zero address rather than OpenZeppelin's SafeERC20, so the deposit was treated as valid. The Ethereum-side QBridge emitted a Deposit event and the BSC side minted 77,162 qXETH without real ETH being deposited. The attacker repeated this, then borrowed and drained about 206,809 BNB from Qubit's pools and routed funds through Tornado Cash. Chainalysis assessed the attack as 'likely' the work of North Korea-linked hackers based on laundering methodology; South Korea's TCIC and NIS ran a parallel tracking effort. Qubit offered a bug bounty rising from $250,000 to $1 million to $2 million for return of the funds (reported by January 31, 2022); the attacker did not respond and no funds were reported recovered. It was the seventh-largest DeFi hack on record at the time and the team's second catastrophic loss within eight months.","heading":"January 2022 Qubit Finance Hack, approx. $80 Million","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-qubit-hack-january-2022","name":"Halborn — Explained: The Qubit Hack (January 2022)","type":"research","credibility":3},{"url":"https://cointelegraph.com/news/qubit-finance-suffers-80-million-loss-following-hack","name":"CoinTelegraph — Qubit Finance suffers $80 million loss following hack","type":"news_article","credibility":3},{"url":"https://www.coindesk.com/markets/2022/01/28/defi-protocol-qubit-finance-exploited-for-80m","name":"CoinDesk — DeFi protocol Qubit Finance exploited for $80M","type":"news_article","credibility":3},{"url":"https://bloomberg.com/news/articles/2022-01-28/hackers-seize-80-million-from-qubit-in-lastest-defi-attack","name":"Bloomberg — Hackers seize $80 million from Qubit in latest DeFi attack","type":"news_article","credibility":3},{"url":"https://therecord.media/qubit-finance-platform-hacked-for-80-million-worth-of-cryptocurrency","name":"The Record — Qubit Finance platform hacked for $80 million","type":"news_article","credibility":3},{"url":"https://www.chainalysis.com/blog/qubit-hack-north-korea/","name":"Chainalysis — Qubit hack and North Korea","type":"research","credibility":3},{"url":"https://beincrypto.com/qubit-finance-hacked-for-80-million-in-latest-defi-exploit/","name":"BeInCrypto — Qubit Finance hacked for $80 million","type":"news_article","credibility":3}],"severity":"high"},{"content":"PancakeBunny received a Haechi Labs smart contract audit (version 2.0, publicly available on its GitHub repository) before the May 2021 attack. It reportedly found no critical or major issues, only two minor ones, and did not flag the oracle design flaw that was exploited. After the May incident the team announced plans to integrate Chainlink price oracles. After the exploits the team engaged Theori, CertiK and Hexlant as additional security reviewers and established an Immunefi bug bounty with 1:1 matching through the Armour Alliance Bug Bounty Challenge, and published a security bulletin on remediation steps. Nevertheless, the July 2021 polyBUNNY exploit showed the same class of minting flaw in the Polygon deployment, and the Qubit hack involved a deprecated legacy function never removed from a production contract; Halborn noted that proper auditing and change management would likely have caught it. One account characterises the three exploits across two years as a systemic failure of security diligence, and another notes concerns about the team's incident response and inter-protocol coordination.","heading":"Audit Failures and Security Posture","sources":[{"url":"https://pancakebunny-finance.readthedocs.io/en/main/audits.html","name":"PancakeBunny documentation — Audits","type":"official","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-pancakebunny-protocol-hack-may-2021","name":"Halborn — Explained: The PancakeBunny Protocol Hack (May 2021)","type":"research","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-qubit-hack-january-2022","name":"Halborn — Explained: The Qubit Hack (January 2022)","type":"research","credibility":3},{"url":"https://rekt.news/pancakebunny2-rekt","name":"Rekt News — PancakeBunny (polyBUNNY exploit)","type":"research","credibility":3},{"url":"https://pancakebunny.medium.com/pancakebunny-security-bulletin-9b03c42d2512","name":"PancakeBunny (Medium) — Security bulletin","type":"official","credibility":3},{"url":"https://github.com/PancakeBunny-finance/Bunny/blob/main/audits/%5BHAECHI%20AUDIT%5D%20PancakeBunny%20Smart%20Contract%20Audit%20Report%20ver%202.0.pdf","name":"GitHub — Haechi audit report, PancakeBunny Smart Contract Audit v2.0","type":"official","credibility":3}],"severity":"medium"},{"content":"PancakeBunny was developed by Team MOUND, operating under Mound Inc. (described in some sources as a South Korean company), and launched on Binance Smart Chain in December 2020 as a yield aggregator auto-compounding PancakeSwap (CAKE) and Venus (XVS) farming positions, charging a 30% performance fee and a 0.5% withdrawal fee within 72 hours of deposit. At its peak it reportedly ranked fourth among BSC projects by TVL. The team exited stealth in April 2021 to announce a $1.6 million seed round led by Binance Labs, with IDEO CoLab, SparkLabs and Andrew Lee (Handshake, LTM) also investing, about five weeks before the May 2021 attack. Individual team members were not publicly identified, so no named person is accountable for the exploits, which together caused over $127 million in losses ($45 million, $2.4 million and $80 million). No regulatory or law enforcement action against Team MOUND, Mound Inc. or PancakeBunny has been identified in public records.","heading":"Team Anonymity and Governance","sources":[{"url":"https://pancakebunny.medium.com/pancake-bunny-x-binance-labs-introducing-your-team-mound-288c21209375","name":"PancakeBunny (Medium) — Pancake Bunny x Binance Labs: Introducing Team MOUND","type":"official","credibility":3},{"url":"https://techcrunch.com/2021/04/12/binance-labs-leads-1-6m-seed-round-in-defi-startup-mound-the-developer-of-pancake-bunny/","name":"TechCrunch — Binance Labs leads $1.6M seed round in DeFi startup Mound","type":"news_article","credibility":3},{"url":"https://beincrypto.com/binance-labs-leads-1-6m-investment-for-mound-defi-startup/","name":"BeInCrypto — Binance Labs leads $1.6M investment for Mound","type":"news_article","credibility":3},{"url":"https://crypto-economy.com/pancakebunny-finance/","name":"Crypto-Economy — PancakeBunny Finance","type":"news_article","credibility":3},{"url":"https://pancakebunny-finance.readthedocs.io/en/main/","name":"PancakeBunny documentation","type":"official","credibility":3}],"severity":"medium"},{"content":"After the May 2021 attack the team published a post-mortem (about May 21) and a Go Forward Plan (about May 27) and then a recovery plan that issued pBUNNY (Platinum BUNNY) tokens to BUNNY holders at the time of the exploit, entitling them to proportional claims on a Compensation Pool funded by protocol performance fees, team contributions, airdropped QFI tokens and any funds recovered from the attacker. The team also launched the MND (Mound) token, which BUNNY holders could swap at a 1.5x ratio. Estimates of the compensation differ: the team projected up to $30 million in performance fees to pBUNNY holders if TVL averaged $1-2 billion over three months, while another account says the Bunny Pool disbursed 100% of accumulated performance fees, about $55 million, over the following 90 days. After the July 2021 polyBUNNY exploit the team distributed $2.4 million in MND. After the Qubit hack it offered a bounty of up to $2 million. Mound also tripled development capacity. No stolen funds from any exploit were publicly confirmed as recovered. By early 2022 the team had wound down active development and moved PancakeBunny to a DAO structure.","heading":"Recovery Attempts and Compensation","sources":[{"url":"https://pancakebunny.medium.com/pancakebunny-recovery-plan-63324473ceb4","name":"PancakeBunny (Medium) — Recovery plan","type":"official","credibility":3},{"url":"https://www.bitcoininsider.org/article/117201/pancakebunny-releases-recovery-plan-post-flash-loan-attack","name":"Bitcoin Insider — PancakeBunny releases recovery plan post flash loan attack","type":"news_article","credibility":3},{"url":"https://pancakebunny.medium.com/polybunny-pbunny-mnd-compensation-cee3d5883ae6","name":"PancakeBunny (Medium) — polyBUNNY, pBUNNY and MND compensation","type":"official","credibility":3},{"url":"https://pancakebunny.medium.com/go-forward-plan-e29e58bc375f","name":"PancakeBunny (Medium) — Go Forward Plan","type":"official","credibility":3},{"url":"https://pancakebunny.medium.com/pbunny-and-the-compensation-pool-how-to-use-them-and-how-they-work-c9c71fb34cad","name":"PancakeBunny (Medium) — pBUNNY and the Compensation Pool","type":"official","credibility":3},{"url":"https://beincrypto.com/pancakebunny-postmortem-details-attack-compensation-plan/","name":"BeInCrypto — PancakeBunny post-mortem details attack and compensation plan","type":"news_article","credibility":3}],"severity":"medium"},{"content":"BUNNY reached an all-time high of about $576 (April 21, 2021 per one account) or about $553 (April 27, 2021 per another). After the May 2021 attack it fell to about $6; one account adds that it briefly recovered to around $146 afterwards, whereas other accounts give about $146 as the pre-attack price. Reported later prices: about $1.16 in 2022 (99.8% below the high), about $0.30 in 2023 (and below $1 by early 2023), and near $0.06 in late 2024 with a market cap below $35,000, over 99.9% below the high and outside the top 3,000 cryptocurrencies. TVL, which peaked above $10 billion, fell to about $1 billion immediately post-exploit and to near zero in later years per DeFi Llama. As of 2026 the protocol operates with minimal activity, has not been formally shut down, and its GitHub repositories show no significant development after 2022. No regulatory actions or law enforcement proceedings against the Mound team or PancakeBunny have been publicly reported.","heading":"Token Performance and Current Status","sources":[{"url":"https://coinmarketcap.com/currencies/pancakebunny/","name":"CoinMarketCap — PancakeBunny (BUNNY)","type":"other","credibility":3},{"url":"https://coinmarketcap.com/alexandria/article/the-tragicomedy-of-pancakebunny","name":"CoinMarketCap — The Tragicomedy of PancakeBunny","type":"other","credibility":3},{"url":"https://defillama.com/protocol/bunny","name":"DefiLlama — Bunny protocol","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/pancake-bunny","name":"CoinGecko — Pancake Bunny","type":"other","credibility":3},{"url":"https://cryptopotato.com/pancake-bunny-exploit-44-million-stolen-as-bunny-token-crashed-99-in-seconds/","name":"CryptoPotato — Pancake Bunny exploit","type":"news_article","credibility":3},{"url":"https://www.bitdegree.org/cryptocurrency-prices/pancakebunny-bunny-price/price-history","name":"BitDegree — PancakeBunny price history","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2020-12","event":"PancakeBunny launches on Binance Smart Chain, developed by Team Mound.","source":""},{"date":"2021-04","event":"Binance Labs leads a $1.6 million seed round in Mound Inc. (April 12, 2021), with IDEO CoLab and SparkLabs also participating; the team exits stealth but remains anonymous. BUNNY reaches its all-time high of about $576.25 (April 21) or about $553 (April 27) depending on source.","source":""},{"date":"2021-05","event":"May 19-20, 2021: flash loan attack on PancakeBunny (BSC). Attacker borrows about 2.3 million BNB/WBNB via flash loans, manipulates the internal price calculation, mints BUNNY tokens and nets about $45 million. BUNNY price crashes from about $146 to about $6.","source":""},{"date":"2021-05","event":"About May 21, 2021: PancakeBunny publishes a post-mortem characterising the incident as an 'economic exploit' rather than a smart contract breach, and announces a recovery plan. About May 25-26: forks AutoShark, Merlin Labs and PancakeHunny are exploited; about May 27: PancakeBunny publishes its Go Forward Plan with the pBUNNY compensation token and Compensation Pool.","source":""},{"date":"2021-06","event":"PancakeBunny launches its formal recovery plan including the pBUNNY compensation token, a Compensation Pool funded by performance fees, and the MND token at a 1.5x BUNNY swap ratio.","source":""},{"date":"2021-07","event":"July 14, 2021: ApeRocketFi, a PancakeBunny fork, is exploited with the same mint-manipulation flaw. July 16: polyBUNNY on Polygon is hit by a near-identical flash loan attack minting about 2.1 million polyBUNNY worth about $2.4 million; the price falls from about $10 to $1.78 (82%). July 21: the team announces a slower release pace, testnet deployments, bounties and multi-layer code reviews, and a $2.4 million MND compensation plan.","source":""},{"date":"2022-01","event":"January 27, 2022: Qubit Finance (QBridge) is hacked for about $80 million via a legacy deposit function, draining 206,809 BNB; funds routed through Tornado Cash; Chainalysis assesses the attack as likely North Korea-linked. About January 31: Qubit offers escalating bounties up to $2 million; no response or fund return reported. BUNNY trades at about $1.16 in 2022, down 99.8% from its high.","source":""},{"date":"2022-02","event":"PancakeBunny transitions to a DAO structure as active development winds down and publishes a 2022 roadmap, after which development activity is minimal.","source":""},{"date":"2023","event":"BUNNY trades at about $0.30; the protocol continues with minimal TVL and activity.","source":""},{"date":"2024","event":"BUNNY trades near $0.06 with a market cap below $35,000, over 99.9% below its all-time high; protocol TVL near zero; no confirmed recovery of funds from any of the three exploits.","source":""}],"sources_used":[{"url":"https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-defi-token-bunny-to-crash-over-95","name":"CoinDesk — Flash Loan Attack Causes DeFi Token BUNNY to Crash Over 95%","type":"news_article","archive_url":"https://web.archive.org/web/20260915235214/https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-defi-token-bunny-to-crash-over-95","credibility":3,"archive_timestamp":"2026-09-15T23:52:14+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-pancakebunny-protocol-hack-may-2021","name":"Halborn — Explained: The PancakeBunny Protocol Hack (May 2021)","type":"research","archive_url":"http://web.archive.org/web/20260516232507/https://www.halborn.com/blog/post/explained-the-pancakebunny-protocol-hack-may-2021","credibility":3,"archive_timestamp":"2026-05-16T23:25:07+00:00"},{"url":"https://cointelegraph.com/news/pancakebunny-tanks-96-following-200m-flash-loan-exploit","name":"CoinTelegraph — PancakeBunny tanks 96% following $200M flash loan exploit","type":"news_article","archive_url":"https://web.archive.org/web/20260830083920/https://cointelegraph.com/news/pancakebunny-tanks-96-following-200m-flash-loan-exploit","credibility":3,"archive_timestamp":"2026-08-30T08:39:20+00:00"},{"url":"https://decrypt.co/71585/pancakebunny-defi-exploit","name":"Decrypt — PancakeBunny DeFi exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260411011913/https://decrypt.co/71585/pancakebunny-defi-exploit","credibility":3,"archive_timestamp":"2026-04-11T01:19:13+00:00"},{"url":"https://rekt.news/pancakebunny-rekt","name":"Rekt News — PancakeBunny","type":"research","archive_url":"http://web.archive.org/web/20260618164500/https://rekt.news/pancakebunny-rekt","credibility":3,"archive_timestamp":"2026-06-18T16:45:00+00:00"},{"url":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","name":"Amber Group (Medium) — BSC Flash Loan Attack: PancakeBunny","type":"research","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://rekt.news/pancakebunny2-rekt","name":"Rekt News — PancakeBunny (polyBUNNY exploit)","type":"research","archive_url":"http://web.archive.org/web/20260718213117/https://rekt.news/pancakebunny2-rekt","credibility":3,"archive_timestamp":"2026-07-18T21:31:17+00:00"},{"url":"https://cryptoslate.com/bsc-defi-app-pancakebunny-releases-post-mortem-of-2-4-million-exploit/","name":"CryptoSlate — PancakeBunny releases post-mortem of $2.4 million exploit","type":"news_article","archive_url":"http://web.archive.org/web/20251114171105/https://cryptoslate.com/bsc-defi-app-pancakebunny-releases-post-mortem-of-2-4-million-exploit/","credibility":3,"archive_timestamp":"2025-11-14T17:11:05+00:00"},{"url":"https://beincrypto.com/polybunny-finance-releases-2-4m-defi-attack-post-mortem-report/","name":"BeInCrypto — polyBUNNY Finance releases $2.4M DeFi attack post-mortem report","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://pancakebunny.medium.com/polybunny-post-mortem-compensation-42b5c35ce957","name":"PancakeBunny (Medium) — polyBUNNY post-mortem and compensation","type":"official","archive_url":"http://web.archive.org/web/20260322055925/https://pancakebunny.medium.com/polybunny-post-mortem-compensation-42b5c35ce957","credibility":3,"archive_timestamp":"2026-03-22T05:59:25+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-qubit-hack-january-2022","name":"Halborn — Explained: The Qubit Hack (January 2022)","type":"research","archive_url":"http://web.archive.org/web/20260414185710/https://www.halborn.com/blog/post/explained-the-qubit-hack-january-2022","credibility":3,"archive_timestamp":"2026-04-14T18:57:10+00:00"},{"url":"https://cointelegraph.com/news/qubit-finance-suffers-80-million-loss-following-hack","name":"CoinTelegraph — Qubit Finance suffers $80 million loss following hack","type":"news_article","archive_url":"http://web.archive.org/web/20260729045734/https://cointelegraph.com/news/qubit-finance-suffers-80-million-loss-following-hack","credibility":3,"archive_timestamp":"2026-07-29T04:57:34+00:00"},{"url":"https://www.coindesk.com/markets/2022/01/28/defi-protocol-qubit-finance-exploited-for-80m","name":"CoinDesk — DeFi protocol Qubit Finance exploited for $80M","type":"news_article","archive_url":"http://web.archive.org/web/20250925133424/https://www.coindesk.com/markets/2022/01/28/defi-protocol-qubit-finance-exploited-for-80m","credibility":3,"archive_timestamp":"2025-09-25T13:34:24+00:00"},{"url":"https://bloomberg.com/news/articles/2022-01-28/hackers-seize-80-million-from-qubit-in-lastest-defi-attack","name":"Bloomberg — Hackers seize $80 million from Qubit in latest DeFi attack","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://therecord.media/qubit-finance-platform-hacked-for-80-million-worth-of-cryptocurrency","name":"The Record — Qubit Finance platform hacked for $80 million","type":"news_article","archive_url":"http://web.archive.org/web/20260805154933/https://therecord.media/qubit-finance-platform-hacked-for-80-million-worth-of-cryptocurrency","credibility":3,"archive_timestamp":"2026-08-05T15:49:33+00:00"},{"url":"https://www.chainalysis.com/blog/qubit-hack-north-korea/","name":"Chainalysis — Qubit hack and North Korea","type":"research","archive_url":"http://web.archive.org/web/20260411080407/https://www.chainalysis.com/blog/qubit-hack-north-korea/","credibility":3,"archive_timestamp":"2026-04-11T08:04:07+00:00"},{"url":"https://beincrypto.com/qubit-finance-hacked-for-80-million-in-latest-defi-exploit/","name":"BeInCrypto — Qubit Finance hacked for $80 million","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://pancakebunny-finance.readthedocs.io/en/main/audits.html","name":"PancakeBunny documentation — Audits","type":"official","archive_url":"https://web.archive.org/web/20260830130825/https://pancakebunny-finance.readthedocs.io/en/main/audits.html","credibility":3,"archive_timestamp":"2026-08-30T13:08:25+00:00"},{"url":"https://pancakebunny.medium.com/pancake-bunny-x-binance-labs-introducing-your-team-mound-288c21209375","name":"PancakeBunny (Medium) — Pancake Bunny x Binance Labs: Introducing Team MOUND","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://techcrunch.com/2021/04/12/binance-labs-leads-1-6m-seed-round-in-defi-startup-mound-the-developer-of-pancake-bunny/","name":"TechCrunch — Binance Labs leads $1.6M seed round in DeFi startup Mound","type":"news_article","archive_url":"http://web.archive.org/web/20260221034036/https://techcrunch.com/2021/04/12/binance-labs-leads-1-6m-seed-round-in-defi-startup-mound-the-developer-of-pancake-bunny/","credibility":3,"archive_timestamp":"2026-02-21T03:40:36+00:00"},{"url":"https://beincrypto.com/binance-labs-leads-1-6m-investment-for-mound-defi-startup/","name":"BeInCrypto — Binance Labs leads $1.6M investment for Mound","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://pancakebunny.medium.com/pancakebunny-recovery-plan-63324473ceb4","name":"PancakeBunny (Medium) — Recovery plan","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.bitcoininsider.org/article/117201/pancakebunny-releases-recovery-plan-post-flash-loan-attack","name":"Bitcoin Insider — PancakeBunny releases recovery plan post flash loan attack","type":"news_article","archive_url":"https://web.archive.org/web/20260830131707/https://www.bitcoininsider.org/article/117201/pancakebunny-releases-recovery-plan-post-flash-loan-attack","credibility":3,"archive_timestamp":"2026-08-30T13:17:07+00:00"},{"url":"https://pancakebunny.medium.com/polybunny-pbunny-mnd-compensation-cee3d5883ae6","name":"PancakeBunny (Medium) — polyBUNNY, pBUNNY and MND compensation","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinmarketcap.com/currencies/pancakebunny/","name":"CoinMarketCap — PancakeBunny (BUNNY)","type":"other","archive_url":"http://web.archive.org/web/20260228081556/https://coinmarketcap.com/currencies/pancakebunny/","credibility":3,"archive_timestamp":"2026-02-28T08:15:56+00:00"},{"url":"https://coinmarketcap.com/alexandria/article/the-tragicomedy-of-pancakebunny","name":"CoinMarketCap — The Tragicomedy of PancakeBunny","type":"other","archive_url":"https://web.archive.org/web/20260830203317/https://coinmarketcap.com/academy/article/the-tragicomedy-of-pancakebunny","credibility":3,"archive_timestamp":"2026-08-30T20:33:17+00:00"},{"url":"https://defillama.com/protocol/bunny","name":"DefiLlama — Bunny protocol","type":"other","archive_url":"http://web.archive.org/web/20251007120256/https://defillama.com/protocol/bunny","credibility":3,"archive_timestamp":"2025-10-07T12:02:56+00:00"},{"url":"https://www.coingecko.com/en/coins/pancake-bunny","name":"CoinGecko — Pancake Bunny","type":"other","archive_url":"http://web.archive.org/web/20260213000900/https://www.coingecko.com/en/coins/pancake-bunny","credibility":3,"archive_timestamp":"2026-02-13T00:09:00+00:00"},{"url":"https://cryptopotato.com/pancake-bunny-exploit-44-million-stolen-as-bunny-token-crashed-99-in-seconds/","name":"CryptoPotato — Pancake Bunny exploit","type":"news_article","archive_url":"http://web.archive.org/web/20260207052851/https://cryptopotato.com/pancake-bunny-exploit-44-million-stolen-as-bunny-token-crashed-99-in-seconds/","credibility":3,"archive_timestamp":"2026-02-07T05:28:51+00:00"},{"url":"https://crypto-economy.com/pancakebunny-finance/","name":"Crypto-Economy — PancakeBunny Finance","type":"news_article","archive_url":"http://web.archive.org/web/20260725091251/https://crypto-economy.com/pancakebunny-finance/","credibility":3,"archive_timestamp":"2026-07-25T09:12:51+00:00"},{"url":"https://pancakebunny-finance.readthedocs.io/en/main/","name":"PancakeBunny documentation","type":"official","archive_url":"http://web.archive.org/web/20260228081556/https://pancakebunny-finance.readthedocs.io/en/main/","credibility":3,"archive_timestamp":"2026-02-28T08:15:56+00:00"},{"url":"https://beincrypto.com/pancakebunny-attacked-massive-200m-flash-loan-exploit/","name":"BeInCrypto — PancakeBunny attacked in massive $200M flash loan exploit","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cmichel.io/bsc-pancake-bunny-exploit-post-mortem/","name":"cmichel — BSC Pancake Bunny exploit post-mortem","type":"research","archive_url":"http://web.archive.org/web/20260503003602/https://cmichel.io/bsc-pancake-bunny-exploit-post-mortem/","credibility":3,"archive_timestamp":"2026-05-03T00:36:02+00:00"},{"url":"https://binancechain.news/pancakebunny-hit-with-another-flash-loan-exploit-this-time-on-polygon/2021/07/19/","name":"Binance Chain News — PancakeBunny hit with another flash loan exploit on Polygon","type":"news_article","archive_url":"http://web.archive.org/web/20250913210538/https://binancechain.news/pancakebunny-hit-with-another-flash-loan-exploit-this-time-on-polygon/2021/07/19/","credibility":3,"archive_timestamp":"2025-09-13T21:05:38+00:00"},{"url":"https://pancakebunny.medium.com/go-forward-plan-e29e58bc375f","name":"PancakeBunny (Medium) — Go Forward Plan","type":"official","archive_url":"http://web.archive.org/web/20250918085052/https://pancakebunny.medium.com/go-forward-plan-e29e58bc375f","credibility":3,"archive_timestamp":"2025-09-18T08:50:52+00:00"},{"url":"https://pancakebunny.medium.com/pbunny-and-the-compensation-pool-how-to-use-them-and-how-they-work-c9c71fb34cad","name":"PancakeBunny (Medium) — pBUNNY and the Compensation Pool","type":"official","archive_url":"http://web.archive.org/web/20251011191110/https://pancakebunny.medium.com/pbunny-and-the-compensation-pool-how-to-use-them-and-how-they-work-c9c71fb34cad","credibility":3,"archive_timestamp":"2025-10-11T19:11:10+00:00"},{"url":"https://beincrypto.com/pancakebunny-postmortem-details-attack-compensation-plan/","name":"BeInCrypto — PancakeBunny post-mortem details attack and compensation plan","type":"news_article","archive_url":"http://web.archive.org/web/20261006232225/https://beincrypto.com/pancakebunny-postmortem-details-attack-compensation-plan/","credibility":3,"archive_timestamp":"2026-10-06T23:22:25+00:00"},{"url":"https://pancakebunny.medium.com/pancakebunny-security-bulletin-9b03c42d2512","name":"PancakeBunny (Medium) — Security bulletin","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://github.com/PancakeBunny-finance/Bunny/blob/main/audits/%5BHAECHI%20AUDIT%5D%20PancakeBunny%20Smart%20Contract%20Audit%20Report%20ver%202.0.pdf","name":"GitHub — Haechi audit report, PancakeBunny Smart Contract Audit v2.0","type":"official","archive_url":"http://web.archive.org/web/20260528015848/https://github.com/PancakeBunny-finance/Bunny/blob/main/audits/%5BHAECHI%20AUDIT%5D%20PancakeBunny%20Smart%20Contract%20Audit%20Report%20ver%202.0.pdf","credibility":3,"archive_timestamp":"2026-05-28T01:58:48+00:00"},{"url":"https://rekt.news/merlinlabs-rekt","name":"Rekt News — Merlin Labs","type":"research","archive_url":"http://web.archive.org/web/20260322055936/https://rekt.news/merlinlabs-rekt","credibility":3,"archive_timestamp":"2026-03-22T05:59:36+00:00"},{"url":"https://thefinancialanalyst.net/2021/07/24/bsc-flash-loan-attack-the-three-copycats/","name":"The Financial Analyst — BSC flash loan attack: the three copycats","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.bitdegree.org/cryptocurrency-prices/pancakebunny-bunny-price/price-history","name":"BitDegree — PancakeBunny price history","type":"other","archive_url":"https://web.archive.org/web/20260830211910/https://www.bitdegree.org/cryptocurrency-prices/pancakebunny-bunny-price#price-history","credibility":3,"archive_timestamp":"2026-08-30T21:19:10+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-05-04T02:54:57.275154+00:00","updated_at":"2026-11-01T23:15:01.323+00:00"},"source_quality":{"total":42,"tier1":0,"tier2":10,"tier3":0,"unrated":32},"follower_count":null,"content_updated_at":"2026-11-01T23:15:02.425Z","last_fact_checked_at":"2026-11-01T23:15:01.600Z","fact_check_next_allowed_at":"2026-11-08T23:15:01.600Z","update_next_allowed_at":null}