{"id":83615,"date":"2024-07-08T09:45:51","date_gmt":"2024-07-08T13:45:51","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=83615"},"modified":"2024-07-08T09:46:04","modified_gmt":"2024-07-08T13:46:04","slug":"pancake-bunny-hacker-moves-2-9m-in-ether-after-3-years","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/pancake-bunny-hacker-moves-2-9m-in-ether-after-3-years\/","title":{"rendered":"Pancake Bunny Hacker Moves $2.9M in Ether After 3 Years"},"content":{"rendered":"\n<p>After three years of inactivity, stolen funds worth $2.9M ETH associated with the Pancake Bunny hack were transferred through the <a href=\"https:\/\/coinscreed.com\/staging\/remilia-dao-hacker-transfers-4-3m-to-tornado-cash.html\">privacy protocol Tornado Cash<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"563\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-1024x563.png\" alt=\"Pancake Bunny Hacker Moves $2.9M in Ether After 3 Years\" class=\"wp-image-83622\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-1024x563.png 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-300x165.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-768x423.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-750x413.png 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39-1140x627.png 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39.png 1256w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Pancake Bunny Hacker Moves $2.9M in Ether After 3 Years<\/figcaption><\/figure>\n\n\n\n<p>Pancake Bunny experienced a flash loan attack in May 2021, losing approximately 697,000 BUNNY tokens and 114,000 BNB. This event significantly impacted the value of the BUNNY token, which plummeted by 95%.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"703\" height=\"407\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-36.png\" alt=\"Price drop in BUNNY\/BNB trading pair following the initial attack: Poocoin.app\" class=\"wp-image-83617\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-36.png 703w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-36-300x174.png 300w\" sizes=\"(max-width: 703px) 100vw, 703px\" \/><figcaption class=\"wp-element-caption\"><em>Price drop in BUNNY\/BNB trading pair following the initial attack:\u00a0<a href=\"https:\/\/poocoin.app\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Poocoin.app<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a><\/em><\/figcaption><\/figure>\n\n\n\n<p>Following the Pancake Bunny breach<\/p>\n\n\n\n<p>Pancake Bunny was ultimately unable to recover the stolen funds and dissolved the protocol, resulting in the formation of a decentralized autonomous organization (DAO).<\/p>\n\n\n\n<p>Three years later, on July 7, a wallet address associated with the Pancake Bunny hacker transferred 1,002 Ether of stolen funds to Tornado Cash to obstruct traceability.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/CertiKInsight?src=hash&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">#CertiKInsight<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> \ud83d\udea8<br><br>On Sunday the <a href=\"https:\/\/twitter.com\/PancakeBunnyFin?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@PancakeBunnyFin<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> exploiter deposited 1002 ETH (~$2.9m) into <a href=\"https:\/\/twitter.com\/TornadoCash?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">@TornadoCash<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> via 0xd0f2259e0bd71e849143bbc07f4e427bb6f7756b<br><br>Bunny Finance was exploited for ~$45m in May 2021 <br><br>The exploiter still holds $11.4m DAI in 0x820C\ud83d\udc47 <a href=\"https:\/\/t.co\/Jcc18Q1NIY\" target=\"_blank\">pic.twitter.com\/Jcc18Q1NIY<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; CertiK Alert (@CertiKAlert) <a href=\"https:\/\/twitter.com\/CertiKAlert\/status\/1810220646414123436?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">July 8, 2024<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Stolen funds are currently in transit <\/h2>\n\n\n\n<p>Following the current market prices, the intruder took approximately $3 million in Ether. The Pancake Bunny exploiter currently possesses $11.4 million of Dai, according to CertiK.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"949\" height=\"290\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-37.png\" alt=\"Tracking Pancake Bunny\u2019s lost funds. Source: CertiK\" class=\"wp-image-83618\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-37.png 949w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-37-300x92.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-37-768x235.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-37-750x229.png 750w\" sizes=\"(max-width: 949px) 100vw, 949px\" \/><figcaption class=\"wp-element-caption\">Tracking Pancake Bunny\u2019s lost funds. Source: CertiK<\/figcaption><\/figure>\n\n\n\n<p>When it comes to safeguarding protocol hacks, crypto security specialists place a significant emphasis on the application of preventive measures. CertiK transferred its suite of 12 blockchain applications in Asia to a cloud computing subsidiary of the <a href=\"https:\/\/coinscreed.com\/staging\/blockchain-security-firm-certik-moves-services-to-alibaba-cloud.html\">Chinese e-commerce giant Alibaba<\/a> in this endeavor.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"940\" height=\"620\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-38.png\" alt=\"CertiK\u2019s existing suite of product offerings. Source: CertiK\" class=\"wp-image-83619\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-38.png 940w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-38-300x198.png 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-38-768x507.png 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-38-750x495.png 750w\" sizes=\"(max-width: 940px) 100vw, 940px\" \/><figcaption class=\"wp-element-caption\"><em>CertiK\u2019s existing suite of product offerings. Source: CertiK<\/em><\/figcaption><\/figure>\n\n\n\n<p>CertiK's co-founder, Ronghui Gu, stated:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>\u201cFor over five years, we have believed in the transformative power of blockchain technology. We look forward to empowering developers with secure blockchain development and deployment through Alibaba Cloud\u2019s platform.\u201d<\/em><\/p>\n<\/blockquote>\n\n\n\n<p>The transition enables developers to anticipate significant resource requirements during peak hours and leverage Alibaba Cloud's supplementary computing, storage, and distribution resources.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After three years of inactivity, stolen funds worth $2.9M ETH associated with the Pancake Bunny hack were transferred through the privacy protocol Tornado Cash. Pancake Bunny experienced a flash loan attack in May 2021, losing approximately 697,000 BUNNY tokens and 114,000 BNB. This event significantly impacted the value of the BUNNY token, which plummeted by [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":83622,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[1496,20388,10782],"class_list":["post-83615","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-hack","tag-pancake-bunny","tag-tornado-cash-2"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2024\/07\/image-39.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/83615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=83615"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/83615\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/83622"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=83615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=83615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=83615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}