Share this article

Bunni DEX Halts Smart Contracts After Exploit Drains $8.4M Across Chains

The exploit targeted BunniHub, the protocol's main contract system, and the funds have been traced to two Ethereum wallets.

Sep 2, 2025, 8:46 a.m.
Fluffy bunny (Pablo Martinez/Unsplash)
(Pablo Martinez/Unsplash)

What to know:

  • Decentralized exchange Bunni paused all smart contract functions after a security breach drained an estimated $8.4 million in crypto.
  • The exploit targeted BunniHub, the protocol's main contract system, and the funds have been traced to two Ethereum wallets.
  • The BUNNI token is down 2.5% in the last 24 hours.

Bunni, a decentralized exchange built on Uniswap v4’, paused all smart contract functions after a security breach drained an estimated $8.4 million in crypto.

Blockchain security firm CertiK said the exploit targeted BunniHub, Bunni’s main contract system, and resulted in $2.3 million in losses on Ethereum. An earlier attack on Uniswap Labs’ layer-2 network Unichain pushed total losses to around $8.4 million. The firm traced the stolen funds to two Ethereum wallets.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Bunni’s developers have suspended all contract operations across supported networks while they investigate the incident, according to a social media post.

“As a precaution, we have paused all smart contract functions on all networks. Our team is actively investigating and will provide updates soon. Thank you for your patience,” Bunni’s post reads.

The exchange runs on Uniswap v4's “hooks” feature, which Uniswap Labs CEO Hayden Adams described as “plugins to customize how pools, swaps, fees, and LP positions interact.”

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Coinbase Taps Chainlink CCIP as Sole Bridge for $7B in Wrapped Tokens Across Chains

Coinbase

The integration enables users to move these assets across different networks and applications, leveraging Chainlink's secure oracle networks.

What to know:

  • Coinbase has tapped Chainlink's Cross-Chain Interoperability Protocol (CCIP) for its wrapped assets, worth around $7 billion.
  • CCIP will enable users to move assets across different networks and applications, leveraging Chainlink's secure oracle networks.
  • The deal aims to improve cross-chain security and reduce risk, using CCIP's decentralized node-based design.