DeFi

Function

would

Bunni

Bunni DEX, a decentralized exchange known for providing users with liquidity, has announced today that it is shutting down operations following a major exploit in September that drained over $8.4 million from user funds.
According to the <a href="https://www.cryptotimes.io/2025/09/05/bunni-reveals-code-flaw-behind-8-4-million-exploit/" target="_blank" rel="noopener noreferrer nofollow">previous reports</a>, the hack targeted the exchanges Ethereum and Unichain smart contracts after taking advantage of a flaw in the Liquidity Distribution Function which allowed the attackers to withdraw more assets than they were entitled to through flash loan manipulation and rounding errors.
The team announced that this shutdown would cost the firm’s growth and that restarting safely would cost six to seven figures in audits and monitoring which they cannot afford.
“Hello everyone, it is with saddened hearts that we announce the shutdown of Bunni,” the team wrote. They also explained that months of work and business effort would also be needed to restore the platform, but currently, these resources are unavailable.
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet">
 Hello everyone, it is with saddened hearts that we announce the shutdown of Bunni. The recent exploit has forced Bunni's growth to a halt, and in order to securely relaunch we'd need to pay 6-7 figures in audit &amp; monitoring expenses alone – requiring capital that we simply don't…— Bunni (@bunni_xyz) <a href="https://twitter.com/bunni_xyz/status/1981160279871558114?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">October 23, 2025</a>
 </blockquote>
 </div>
</figure>
The exploit drained mostly USDC and USDT before the team froze contract operations. A 10% bounty was offered to recover the funds, but the attacker never responded. Audits by Trail of Bits and Cyfrin had taken place earlier, but the flaw was classified as a “logic-level” issue rather than an implementation error.
Since the hack, Bunni’s total value locked has fallen from over $60 million to nearly zero. Trading and development activity stopped completely, leaving the platform inactive.
However, users can still withdraw assets through the Bunni website until further notice. The team also plans to give the remaining treasury assets to BUNNI, LIT, and veBUNNI holders after a legal process is completed. Team members are excluded from this distribution.
<h2 class="wp-block-heading" id="bunni-s-legacy-and-open-access">Bunni’s Legacy and Open Access</h2>
In addition to this, Bunni also changed the license of its v2 smart contracts from BUSL to MIT. This means other developers can now use Bunni’s ideas, like LDFs, surge fees, and automatic rebalancing, for free. The team said they are still working with law enforcement to try to get the stolen funds back.The shutdown adds to the difficult year for blockchain security, which has seen over $3.1 billion lost to hacks and exploits in 2025, according to Hacken’s <a href="https://hacken.io/insights/h1-2025-security-report/" target="_blank" rel="noopener noreferrer nofollow">report</a>.
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 Also Read: <a href="https://www.cryptotimes.io/2025/10/19/u-s-investor-loses-3m-in-xrp-hack-through-huione-laundering/" target="_blank" rel="noopener noreferrer nofollow">U.S. Investor Loses $3M in XRP Hack Through Huione Laundering</a>
</blockquote>

DeFi Exchange Bunni Shuts Down After $8.4M Hack

Table of Contents

The Crypto Times

Other articles published on Oct 23, 2025

Join our free newsletter for daily crypto updates!