Skip to main content
Sign in
PancakeBunny1 decision on this page

Audit log

Every state-changing event for PancakeBunny: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-30 18:25:40Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 423,210,475
    sig
    3M33tJ7Qcwuf…3qbAigQXexplorer ↗
    hash
    12Jrffh4qD8j…o1CbQFALsha256 → base58
    verifying row…full verify ↗
    canonical bytes (6403 B) ▸
    {"actor":"system:backfill","investigation_id":"77de1ee0-ca4e-4123-a6c5-bf61bb6b8f5b","kind":"publish","page_slug":"pancakebunny","published_at":"2026-05-30T18:25:40.585Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"PancakeBunny","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto-economy.com/pancakebunny-finance/","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pancake-bunny-x-binance-labs-introducing-your-team-mound-288c21209375","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny-finance.readthedocs.io/en/main/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-defi-token-bunny-to-crash-over-95","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/71585/pancakebunny-defi-exploit","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/pancakebunny-attacked-massive-200m-flash-loan-exploit/","type":"other","url":""},{"credibility":3,"name":"https://cmichel.io/bsc-pancake-bunny-exploit-post-mortem/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/pancakebunny2-rekt","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/bsc-defi-app-pancakebunny-releases-post-mortem-of-2-4-million-exploit/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/polybunny-finance-releases-2-4m-defi-attack-post-mortem-report/","type":"other","url":""},{"credibility":3,"name":"https://binancechain.news/pancakebunny-hit-with-another-flash-loan-exploit-this-time-on-polygon/2021/07/19/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://pancakebunny.medium.com/go-forward-plan-e29e58bc375f","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pbunny-and-the-compensation-pool-how-to-use-them-and-how-they-work-c9c71fb34cad","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/pancakebunny-postmortem-details-attack-compensation-plan/","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pancakebunny-recovery-plan-63324473ceb4","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/polybunny-pbunny-mnd-compensation-cee3d5883ae6","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://pancakebunny.medium.com/pancakebunny-security-bulletin-9b03c42d2512","type":"other","url":""},{"credibility":3,"name":"https://github.com/PancakeBunny-finance/Bunny/blob/main/audits/%5BHAECHI%20AUDIT%5D%20PancakeBunny%20Smart%20Contract%20Audit%20Report%20ver%202.0.pdf","type":"other","url":""},{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/merlinlabs-rekt","type":"other","url":""},{"credibility":3,"name":"https://thefinancialanalyst.net/2021/07/24/bsc-flash-loan-attack-the-three-copycats/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/pancakebunny/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/pancake-bunny","type":"other","url":""},{"credibility":3,"name":"https://www.bitdegree.org/cryptocurrency-prices/pancakebunny-bunny-price/price-history","type":"other","url":""}]}],"sources_used":[],"summary":"PancakeBunny was a Binance Smart Chain yield aggregator and optimizer built by a team known as Mound, launched in December 2020. The protocol suffered two major flash loan exploits in 2021: a May 20, 2021 attack that caused the BUNNY token to crash over 95% and wiped out approximately $200 million in market capitalization, and a July 16, 2021 attack on its Polygon fork PolyBunny that resulted in $2.4 million in losses. Both exploits stemmed from oracle price manipulation vulnerabilities in the minting reward logic, and the protocol has never recovered to its pre-exploit state.","timeline":[{"date":"2020-12-01","event":"PancakeBunny launches on Binance Smart Chain, developed by Team Mound.","source":""},{"date":"2021-04-27","event":"BUNNY token reaches all-time high of approximately $553.","source":""},{"date":"2021-05-20","event":"Flash loan attack on BSC: attacker mints ~6.9M BUNNY tokens via oracle manipulation, netting ~$45M. BUNNY price crashes over 95% from ~$146 to ~$6. Market cap loss estimated at $200M.","source":""},{"date":"2021-05-25","event":"AutoShark, a PancakeBunny fork, is exploited using the same attack vector.","source":""},{"date":"2021-05-26","event":"Merlin Labs and PancakeHunny, additional PancakeBunny forks, are exploited using similar techniques.","source":""},{"date":"2021-05-27","event":"PancakeBunny publishes Go Forward Plan, announces pBUNNY compensation token and Compensation Pool.","source":""},{"date":"2021-07-14","event":"ApeRocketFi, another PancakeBunny fork on Polygon, is exploited using the same mint-manipulation vulnerability that would be used against PolyBunny two days later.","source":""},{"date":"2021-07-16","event":"PolyBunny (PancakeBunny's Polygon fork) is hit by a second flash loan attack. Attacker mints 2.1M polyBUNNY tokens via SushiSwap vault miscalculation, nets $2.4M (1,281.7 ETH). polyBUNNY price falls 82%.","source":""},{"date":"2021-07-21","event":"Team Bunny announces slowdown of new product releases to prioritize security; distributes MND tokens as compensation to PolyBunny holders.","source":""},{"date":"2022-01-01","event":"BUNNY token price at approximately $1.16, down 99.8% from April 2021 all-time high.","source":""},{"date":"2023-01-01","event":"BUNNY token price at approximately $0.30, protocol continues with minimal TVL and activity.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 16896d12-7d8f-4d3d-9ab2-91ab930f7f4e
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.