What happened
On June 20, 2026, the LABUBU/OLPC PancakeSwap V2 pool on BNB Chain was drained of about $1.12 million.
Technical root cause
OLPC applied an amplified burn when the pool was the transfer sender; publicly callable PancakeSwap skim and sync operations could repeatedly trigger that burn against the pool balance.
How it happened
The attacker repeated skim and sync to collapse the OLPC reserve while LABUBU remained, then acquired mispriced LABUBU and converted it to USDT.
Protocol details
Classification
Token & Share Accounting
Protocol Type
Liquidity Pool
Implementation language
Solidity
Protocol links
Website
@labubu_CTO
Evidence
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
