PeckShieldAlert issued an on-chain security alert saying that an OLPC/LABUBU pool on PancakeSwap on BNB Chain had been exploited, resulting in a loss of approximately $1.1 million. The alert was published by the PeckShieldAlert account and included references to #BNBChain, #Ethereum and #TornadoCash, placing the incident across multiple parts of the on-chain transaction path described in the post.
The affected venue named in the alert is PancakeSwap, and the affected pool is identified as the OLPC/LABUBU pool. The original post did not include a transaction hash, contract address, detailed exploit method, breakdown of stolen assets, or a technical explanation of the vulnerability. It only stated that the pool had been exploited and that the estimated loss was around $1.1 million.
Funds moved from BNB Chain activity to Ethereum
According to the same PeckShieldAlert post, the exploiter bridged the stolen funds to Ethereum after the OLPC/LABUBU pool was exploited. The alert therefore describes not only the location of the incident, BNB Chain, but also the subsequent chain to which the funds were moved, Ethereum. No additional bridge name or transaction identifier was provided in the source text.
After bridging the stolen funds to Ethereum, the exploiter deposited 633.4 ETH into Tornado Cash. This figure is one of the main numerical details disclosed in the alert. PeckShieldAlert’s wording specifically said the exploiter “deposited 633.4 $ETH into #TornadoCash,” making Tornado Cash the named destination for that portion of the assets described in the post.
Small BNB and ETH amounts sent to a dead address
The alert also stated that the exploiter sent 0.0221 BNB and 0.0411 ETH to a dead address. The post did not identify the dead address, did not provide the associated transaction hashes, and did not expand on the purpose of the transfers. Within the information disclosed, the amounts of 0.0221 BNB and 0.0411 ETH are separate from the 633.4 ETH deposit into Tornado Cash.
Taken together, the chain of events described by PeckShieldAlert is limited but clear: an OLPC/LABUBU pool on PancakeSwap on BNB Chain was exploited; the loss was estimated at about $1.1 million; the exploiter bridged the stolen funds to Ethereum; 633.4 ETH was deposited into Tornado Cash; and small amounts of BNB and ETH were sent to a dead address. The source did not provide a project response, remediation plan, user compensation detail, or final investigation result.
Publication details
The PeckShieldAlert post was timestamped at 12:46 on June 20, 2026. The page shown in the source also displayed 1021 views and the prompt “Read 3 replies.” Foresight categorized the item under its homepage headline section with the Chinese headline stating that an OLPC liquidity pool on BSC had been attacked and that about $1.1 million in assets had been stolen.
Based on the disclosed information, the confirmed named entities are PeckShieldAlert, PancakeSwap, BNB Chain, Ethereum, Tornado Cash, OLPC and LABUBU. The confirmed numerical details are the estimated loss of about $1.1 million, the Tornado Cash deposit of 633.4 ETH, and the transfers of 0.0221 BNB and 0.0411 ETH to a dead address.