DEX Bunni Hacked: $2.3M Lost in Smart Contract Exploit

Decentralized exchange (DEX) Bunni suffered a devastating $2.3 million hack due to a smart contract vulnerability. The exploit, linked to flawed contract logic, allowed attackers to siphon funds from liquidity pools, impacting users and providers. Blockchain security experts confirmed the breach, with stolen assets traced across multiple wallets, some moved to privacy-focused platforms like Wasabi.

Bunni’s team swiftly paused operations to limit further damage and engaged auditors to investigate the root cause. They are collaborating with blockchain forensics firms to track and potentially recover the funds. The incident, first highlighted by X posts, underscores the persistent security challenges in decentralized finance (DeFi), where smart contract exploits have caused billions in losses this year alone.

The hack, attributed to malware-driven social engineering, exposed weaknesses in Bunni’s proxy contract deployment, a recurring issue across chains like Ethereum and Solana. Bunni has promised a detailed post-mortem and is exploring compensation options for affected users, though no timeline has been confirmed. The protocol’s response aligns with industry calls for robust audits and bug bounty programs to mitigate risks.

Mexico’s growing crypto market, ranked 14th globally for adoption, amplifies the impact of such incidents. As DeFi platforms like Bunni push for accessibility, this breach highlights the urgent need for enhanced security measures. With DeFi’s rapid growth, experts warn that vulnerabilities in smart contracts remain a critical hurdle, urging users to exercise caution and diversify investments.