Bunny

Aragon

DeFi

Tornado Cash

Tornado

Part of the stolen funds connected to Pancake Bunny — a decentralized finance protocol on the BNB Smart Chain — was funneled through the privacy protocol Tornado Cash after three years of dormancy.
Pancake Bunny <a href="https://cointelegraph.com/news/pancakebunny-tanks-96-following-200m-flash-loan-exploit">suffered a flash loan attack in May 2021</a> and lost roughly 697,000 BUNNY tokens and 114,000 BNB (<a href="https://cointelegraph.com/binance-coin-price-index">BNB</a>), which tanked the value of its BUNNY token by 95%.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/e2034f75-9a88-4be6-9e3b-d5d0f55ae4a7.png" alt="Pancake Bunny hacker siphons $2.9M of Ether through Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Price drop in BUNNY/BNB trading pair following the initial attack: Poocoin.app
 </figcaption>
</figure>
<h2 data-ct-non-breakable="true" id="aftermath-of-pancake-bunny-hack">Aftermath of Pancake Bunny hack</h2>
Pancake Bunny was unable to recover the stolen funds and eventually dissolved the protocol, <a href="https://cointelegraph.com/news/bunny-and-qubit-turns-to-dao-following-80-million-bug-exploit">transforming it into a decentralized autonomous organization (DAO)</a>.
Three years later, on July 7, a wallet address linked to the Pancake Bunny hacker transferred 1,002 Ether (<a href="https://cointelegraph.com/ethereum-price">ETH</a>) of stolen funds to Tornado Cash to prevent traceability. 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/e9293554-7c68-4cf2-a2fa-090437107728.png" alt="Pancake Bunny hacker siphons $2.9M of Ether through Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/CertiKAlert/status/1810220646414123436" target="_blank" rel="noopener nofollow">CertiK</a>
 </figcaption>
</figure>
<h2 data-ct-non-breakable="true" id="stolen-funds-on-the-move-after-many-years">Stolen funds on the move after many years</h2>
Based on current market prices, the hacker siphoned roughly $3 million in Ether. According to CertiK, the Pancake Bunny exploiter currently holds $11.4 million of Dai (<a href="https://cointelegraph.com/dai-price-index">DAI</a>). 
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/c1ab55b9-2743-4bd3-bad4-08890bdc96cf.jpeg" alt="Pancake Bunny hacker siphons $2.9M of Ether through Tornado Cash" title="">
 <figcaption style="text-align: center;">
 Tracking Pancake Bunny’s lost funds. Source: CertiK
 </figcaption>
</figure>
Related: <a href="https://cointelegraph.com/news/certik-report-crypto-losses-h1-2024">Crypto losses reach $1.19B in H1 2024: CertiK calls for better security</a>
Crypto security experts emphasize heavily the importance of preventive measures when it comes to protecting protocol hacks. In this effort, CertiK migrated its suite of 12 blockchain applications in Asia to a cloud computing subsidiary of Chinese e-commerce giant Alibaba.
<figure data-ct-non-breakable="true">
 <img src="https://s3.cointelegraph.com/uploads/2024-07/aa5c5b6c-0bf6-4a50-ba8a-b69c0bc558da.png" alt="Pancake Bunny hacker siphons $2.9M of Ether through Tornado Cash" title="">
 <figcaption style="text-align: center;">
 CertiK’s existing suite of product offerings. Source: CertiK
 </figcaption>
</figure>
Ronghui Gu, co-founder of CertiK said:
<blockquote data-ct-non-breakable="true">
 “For over five years, we have believed in the transformative power of blockchain technology. We look forward to empowering developers with secure blockchain development and deployment through Alibaba Cloud’s platform.”
</blockquote>
The move allows developers expecting high resource demands during peak hours to use Alibaba Cloud’s additional computing, storage and distribution resources.
A CertiK investigation that backfired Blockchain security firm <a href="https://cointelegraph.com/news/certik-kraken-exploit-bug-bounty-white-hat-hackers-threats">CertiK recently identified itself as the “security researcher</a>"&nbsp;that cryptocurrency exchange Kraken claimed stole $3 million worth of digital assets.
Kraken chief security officer Nicholas Percoco claimed that an unnamed security team — not revealed to be CertiK at the time — had committed “extortion” by refusing to return any funds until the exchange agreed to provide “a speculated $ amount that this bug could have caused if they had not disclosed it.”
Magazine: <a href="https://cointelegraph.com/magazine/raider-investors-daos-nouns-aragon/">‘Raider’ investors are looting DAOs — Nouns and Aragon share lessons learned</a>

Pancake Bunny hacker siphons $2.9M of Ether through Tornado Cash

Table of Contents

Cointelegraph

Other articles published on Jul 8, 2024

Delist Announcement from Bitcoin Exchange Binance! Four Altcoin Trading Pairs Delisted from Spot ...

EXCLUSIVE: Fluence Co-Founder Emphasizes Network Resilience For Secure Decentralized Computing

Top Crypto Presale in 2024: MoonBag Raises Over $3.3M in Just A Month, Impressing Celestia and Ri...

Corporate Giants Bet Big on Bitcoin Despite Economic Shaky Ground

$BTC Tumbles to February Low, Investors Bet on These Smaller Cryptos

Solana price is showing bottoming signs, SOL has 35% upside potential

Join our free newsletter for daily crypto updates!