Back to dashboard
Wednesday, May 19, 2021 at 03:00 UTC

PancakeBunny

Flash loan inflated BUNNY mint, then dumped.

Lost
Funds stolen
$45.00M
Recovered
$0.00M0%
Still outstanding
$45.00M
Chain
BNB Chain
Category
DeFi
Attack vector
Flash Loan
Reported by
CertiK
Incident ID
h2021-1

Exploit & recovery timeline

  1. May 19, 2021 · 01:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the flash loan exploit against PancakeBunny.

  2. May 19, 2021 · 03:00 UTC
    Exploit executed

    $45.0M drained from PancakeBunny on BNB Chain via Flash Loan.

  3. May 19, 2021 · 04:00 UTC
    Detected by CertiK

    CertiK flagged the anomalous transactions and published an initial alert.

  4. May 19, 2021 · 07:00 UTC
    Protocol response

    PancakeBunny paused affected contracts or withdrawals and began tracing outbound flows.

  5. May 20, 2021 · 03:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jun 18, 2021 · 03:00 UTC
    Funds written off

    No assets recovered; losses absorbed by the protocol, insurers, or users.