PancakeSwap OLPC/LABUBU Pool Exploited; About $1.1M Moved and 633.4 ETH Deposited to Tornado Cash

June 20 — On-chain alerts from blockchain security firm PeckShield indicate that the OLPC/LABUBU liquidity pool on PancakeSwap on BNB Chain was exploited, with roughly $1.1 million in crypto assets stolen. PeckShield said the attacker quickly bridged the funds to Ethereum and deposited 633.4 ETH into Tornado Cash, a sanctioned crypto mixer, in an apparent effort to obfuscate the trail and hinder tracking. The attacker also made small test transfers, sending 0.0221 BNB and 0.0411 ETH to a long-unused address. The purpose of the transfers remains unclear.