PancakeSwap V2 pool bilged $1.1M as attacker sails off with 10 OLPC tokens on BNB Chain by exploiting the V2 pool pairing OLPC and LABUBU meme tokens.

On June 20, 2026, a PancakeSwap V2 liquidity pool pairing the OLPC and LABUBU meme tokens on BNB Chain was exploited, leading to the loss of roughly $1.1 million in USDT-equivalent liquidity. On‑chain monitors including ExvulSec and PeckShield reported that the attacker targeted the OLPC/LABUBU pair, draining about 1,115,903 USDT from the liquidity path and ending up with a net profit of around $1.11 million. The incident affected a single pool rather than the entire PancakeSwap protocol, but effectively wiped out liquidity for that trading pair. Analysis from incident write‑ups indicates the attack was enabled by reserve desynchronization in the PancakeSwap V2 pool, where token balances could be manipulated before the pool’s internal reserves were updated, allowing the exploiter to arbitrage the discrepancy. Security monitors also described it as a flash‑loan style exploit on BNB Chain, with the attacker subsequently bridging the stolen assets to Ethereum and depositing roughly 633.4 ETH into Tornado Cash to obfuscate the trail, while sending small residual amounts to a burn (blackhole) address. PancakeSwap later stated that its core smart contracts were not directly vulnerable and that it was investigating the root cause, underscoring ongoing systemic risk around low‑cap or meme‑token pools and custom token behaviors in DeFi AMMs.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• OLPC and LABUBU Liquidity Drained for $1.1M Due to Reserve ... (intellectia.ai)
• $1.1M Stolen from PancakeSwap Pool - KuCoin (kucoin.com)
• PancakeSwap Responds to OLPC/LABUBU Liquidity Pool Attack (panewslab.com)
• PeckShieldAlert (x.com)
• Flash Loan: OLPC Liquidity Pool on BSC Exploited, Hacker ... - Bitget (bitget.com)

Explore the topic

• Memes
• BNB