PancakeBunny (BUNNY)
A BNB Chain yield aggregator hit by a flash-loan price-manipulation 'economic exploit' on May 19, 2021. The attacker minted ~6.97M BUNNY and dumped it for about $45M in profit, crashing BUNNY from ~$146 to near $1; the team said no vaults were breached.
Also known as: PancakeBunny, Bunny Finance, BUNNY
Summary
PancakeBunny was a popular yield-aggregator on BNB Chain. On May 19, 2021, an attacker used a series of flash loans (borrowing roughly $700 million in BNB and USDT) to manipulate the price of PancakeSwap LP pools that fed PancakeBunny's reward oracle, causing the protocol to mint about 6.97 million BUNNY as "reward," which the attacker immediately sold. [1][2]
Impact
The team said this was an "economic exploit" rather than a vault breach — no deposited vault funds were directly stolen — but the mass minting and dump crashed BUNNY from about $146 to near $1 (roughly a 95–100% drop), wiping out holders. Analysts (PeckShield) put the attacker's profit at about $45 million. PancakeBunny later published a compensation plan. [1][2]
Bracketed numbers refer to the numbered sources listed below.
People & entities involved
Sources (2)
See also
- Bitcoin Latinum (LTNM)TokensA ~$16M token offering (SAFTs for 'Bitcoin Latinum' / LTNM) that the SEC charged in 2026 as fraud: founder Donald Basile falsely called LTNM 'the world's first insured digital asset' backed by an 'existing trust,' neither of which existed, and diverted investor funds for personal use (including a $160,000 horse).
- Loci (LOCIcoin)TokensA 2017–2018 ICO for 'LOCIcoin' tied to the InnVenn IP-search platform. The SEC charged Loci and CEO John Wise with fraud for raising $7.6M on false claims about revenue, headcount, and user base; Wise also misused investor funds. Settled with a $7.6M penalty and an officer/director bar.
- Blockchain Terminal (BCT)Tokens
This page was last updated on Jun 8, 2026. View revision history.