Verify a decision

{"actor":"system:backfill","investigation_id":"77de1ee0-ca4e-4123-a6c5-bf61bb6b8f5b","kind":"publish","page_slug":"pancakebunny","published_at":"2026-05-30T18:25:40.585Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"PancakeBunny","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto-economy.com/pancakebunny-finance/","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pancake-bunny-x-binance-labs-introducing-your-team-mound-288c21209375","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny-finance.readthedocs.io/en/main/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2021/05/20/flash-loan-attack-causes-defi-token-bunny-to-crash-over-95","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/71585/pancakebunny-defi-exploit","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/pancakebunny-attacked-massive-200m-flash-loan-exploit/","type":"other","url":""},{"credibility":3,"name":"https://cmichel.io/bsc-pancake-bunny-exploit-post-mortem/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/pancakebunny2-rekt","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/bsc-defi-app-pancakebunny-releases-post-mortem-of-2-4-million-exploit/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/polybunny-finance-releases-2-4m-defi-attack-post-mortem-report/","type":"other","url":""},{"credibility":3,"name":"https://binancechain.news/pancakebunny-hit-with-another-flash-loan-exploit-this-time-on-polygon/2021/07/19/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://pancakebunny.medium.com/go-forward-plan-e29e58bc375f","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pbunny-and-the-compensation-pool-how-to-use-them-and-how-they-work-c9c71fb34cad","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/pancakebunny-postmortem-details-attack-compensation-plan/","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/pancakebunny-recovery-plan-63324473ceb4","type":"other","url":""},{"credibility":3,"name":"https://pancakebunny.medium.com/polybunny-pbunny-mnd-compensation-cee3d5883ae6","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://pancakebunny.medium.com/pancakebunny-security-bulletin-9b03c42d2512","type":"other","url":""},{"credibility":3,"name":"https://github.com/PancakeBunny-finance/Bunny/blob/main/audits/%5BHAECHI%20AUDIT%5D%20PancakeBunny%20Smart%20Contract%20Audit%20Report%20ver%202.0.pdf","type":"other","url":""},{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/amber-group/bsc-flash-loan-attack-pancakebunny-3361b6d814fd","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/merlinlabs-rekt","type":"other","url":""},{"credibility":3,"name":"https://thefinancialanalyst.net/2021/07/24/bsc-flash-loan-attack-the-three-copycats/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/pancakebunny/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/pancake-bunny","type":"other","url":""},{"credibility":3,"name":"https://www.bitdegree.org/cryptocurrency-prices/pancakebunny-bunny-price/price-history","type":"other","url":""}]}],"sources_used":[],"summary":"PancakeBunny was a Binance Smart Chain yield aggregator and optimizer built by a team known as Mound, launched in December 2020. The protocol suffered two major flash loan exploits in 2021: a May 20, 2021 attack that caused the BUNNY token to crash over 95% and wiped out approximately $200 million in market capitalization, and a July 16, 2021 attack on its Polygon fork PolyBunny that resulted in $2.4 million in losses. Both exploits stemmed from oracle price manipulation vulnerabilities in the minting reward logic, and the protocol has never recovered to its pre-exploit state.","timeline":[{"date":"2020-12-01","event":"PancakeBunny launches on Binance Smart Chain, developed by Team Mound.","source":""},{"date":"2021-04-27","event":"BUNNY token reaches all-time high of approximately $553.","source":""},{"date":"2021-05-20","event":"Flash loan attack on BSC: attacker mints ~6.9M BUNNY tokens via oracle manipulation, netting ~$45M. BUNNY price crashes over 95% from ~$146 to ~$6. Market cap loss estimated at $200M.","source":""},{"date":"2021-05-25","event":"AutoShark, a PancakeBunny fork, is exploited using the same attack vector.","source":""},{"date":"2021-05-26","event":"Merlin Labs and PancakeHunny, additional PancakeBunny forks, are exploited using similar techniques.","source":""},{"date":"2021-05-27","event":"PancakeBunny publishes Go Forward Plan, announces pBUNNY compensation token and Compensation Pool.","source":""},{"date":"2021-07-14","event":"ApeRocketFi, another PancakeBunny fork on Polygon, is exploited using the same mint-manipulation vulnerability that would be used against PolyBunny two days later.","source":""},{"date":"2021-07-16","event":"PolyBunny (PancakeBunny's Polygon fork) is hit by a second flash loan attack. Attacker mints 2.1M polyBUNNY tokens via SushiSwap vault miscalculation, nets $2.4M (1,281.7 ETH). polyBUNNY price falls 82%.","source":""},{"date":"2021-07-21","event":"Team Bunny announces slowdown of new product releases to prioritize security; distributes MND tokens as compensation to PolyBunny holders.","source":""},{"date":"2022-01-01","event":"BUNNY token price at approximately $1.16, down 99.8% from April 2021 all-time high.","source":""},{"date":"2023-01-01","event":"BUNNY token price at approximately $0.30, protocol continues with minimal TVL and activity.","source":""}]},"v":1}