PancakeSwap Lottery Allegations
Alleged proceeds
$1.8M
Alleged lottery-admin abuse
What happened
A May 2021 investigation by Crypto Pwnage alleged that privileged PancakeSwap lottery access was abused across draws beginning April 12. The report attributed 59,765 CAKE, valued there at approximately $1.8 million, to manipulated draws. This attribution remains an allegation.
Technical root cause
Alleged abuse of lottery-admin draw control combined with predictable block-hash-derived randomness.
How it happened
- According to the investigation, an account with lottery-admin access coordinated ticket purchases and draw operations in the same block.
- The report says this made previous-block-hash-based winning numbers predictable.
- It links repeated winning draws to the privileged account.
Protocol details
Classification
Exchange (DEX) / Access Control
Protocol Type
Exploit/Other
Affected asset / contract
CAKE
Implementation language
Solidity
Protocol links
Website
@PancakeSwap
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
