Share this article

Bunni DEX Halts Smart Contracts After Exploit Drains $8.4M Across Chains

The exploit targeted BunniHub, the protocol's main contract system, and the funds have been traced to two Ethereum wallets.

Sep 2, 2025, 8:46 a.m.
Fluffy bunny (Pablo Martinez/Unsplash)
(Pablo Martinez/Unsplash)

What to know:

  • Decentralized exchange Bunni paused all smart contract functions after a security breach drained an estimated $8.4 million in crypto.
  • The exploit targeted BunniHub, the protocol's main contract system, and the funds have been traced to two Ethereum wallets.
  • The BUNNI token is down 2.5% in the last 24 hours.

Bunni, a decentralized exchange built on Uniswap v4’, paused all smart contract functions after a security breach drained an estimated $8.4 million in crypto.

Blockchain security firm CertiK said the exploit targeted BunniHub, Bunni’s main contract system, and resulted in $2.3 million in losses on Ethereum. An earlier attack on Uniswap Labs’ layer-2 network Unichain pushed total losses to around $8.4 million. The firm traced the stolen funds to two Ethereum wallets.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Bunni’s developers have suspended all contract operations across supported networks while they investigate the incident, according to a social media post.

“As a precaution, we have paused all smart contract functions on all networks. Our team is actively investigating and will provide updates soon. Thank you for your patience,” Bunni’s post reads.

The exchange runs on Uniswap v4's “hooks” feature, which Uniswap Labs CEO Hayden Adams described as “plugins to customize how pools, swaps, fees, and LP positions interact.”

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Coinbase, Chainlink Introduce Base-Solana Bridge to Link Ecosystems

bridge (Modestas Urbonas/Unsplash/Modified by CoinDesk)

The bridge, secured by Chainlink's Cross-Chain Interoperability Protocol, allows users to trade and interact with Solana-based tokens on Base-based dapps.

What to know:

  • A new bridge connecting Base, the layer 2 incubated by Coinbase, and the Solana blockchain is now live on mainnet, enabling asset transfers between the two ecosystems.
  • The bridge, secured by Chainlink's Cross-Chain Interoperability Protocol, allows users to trade and interact with Solana-based tokens on Base-based decentralized applications.
  • The open-source bridge on GitHub enables developers to integrate cross-chain support, marking a step toward interconnected blockchains and "always-on" capital markets, with more chains expected to be linked in the future.