PancakeBunny Hack

TOTAL LOST $2.4M
Medium Flash Loan Attacks

What happened

PancakeBunny's VaultFlipToFlip vault was exploited using 8 flash loans, leading to a skewed calculation of the BUNNY price and a loss of approximately $1B in BUNNY tokens.

The attacker manipulated the price on various PancakeSwap pools using 8 flash loans, which skewed the calculation of the BUNNY price in the VaultFliptoFlip vault. They borrowed WBNB from seven different PancakeSwap pools and USDT from Fortube Bank, deposited a portion of these funds into the WBNB+BUSDT pool, and swapped a large amount of WBNB for BUSDT. This manipulation allowed them to claim a reward of 6.97M BUNNY, valued at about $1B, from VaultFlipToFlip. After the exploit, they returned the flash loans to the PancakeSwap pools and Fortube Bank.

Stolen funds:

- 6.97M BUNNY (~$1B)

The attacker's address:

https://bscscan.com/address/0xa0acc615…d7e187

The transaction behind the attack:

https://bscscan.com/tx/0x897c2de7…e6a979

Case & protocol details

Classification Yield Aggregator
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract polyBUNNY
Protocol Twitter/X @PancakeBunnyFin

Funds Recovery

100.0%

Recovered

$2.4M

Net Loss

$0

Evidence & learning

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.