Blockchain security monitoring account PeckShieldAlert reported on X at 12:46 on June 20, 2026, that an OLPC/LABUBU pool on PancakeSwap on BNB Chain had been exploited, resulting in a loss of roughly $1.1 million. Foresight listed the item under its homepage headline category, while the original link points to the PeckShieldAlert post on X. The headline used BSC, and the post itself tagged the incident as taking place on BNB Chain.
OLPC/LABUBU pool on PancakeSwap was exploited
In the original post, PeckShieldAlert wrote that “An OLPC/LABUBU pool on PancakeSwap on BNBChain has been exploited.” Based on that statement, the affected target was the OLPC/LABUBU liquidity pool on PancakeSwap, and the reported loss was approximately $1.1 million. The public post did not include a transaction hash, a contract address, the exploited function, the number of affected users, or a project response. The disclosed information centered on the loss amount and the subsequent movement of the stolen funds.
The post used or displayed references including #PeckShieldAlert, #BNBChain, #Ethereum and #TornadoCash. The captured X page text also showed 12,000 views and a “Read 9 replies” line. Those interaction details are part of the source page display and do not add further technical information about the exploit itself.
Stolen funds were bridged to Ethereum
PeckShieldAlert said the exploiter bridged the stolen funds to Ethereum. The wording in the post was that the exploiter “bridged the stolen funds to Ethereum,” confirming the movement from the BNB Chain-related environment to the Ethereum network. The post did not name the bridge used, did not provide the cross-chain transaction identifier, and did not break down how each asset was converted before or after the bridge.
After the funds reached Ethereum, PeckShieldAlert reported that 633.4 ETH was deposited into Tornado Cash. The number 633.4 ETH is the clearest on-chain amount disclosed in the post. The post did not explain the exact conversion relationship between the reported $1.1 million loss and the 633.4 ETH deposit, and it did not provide the deposit transaction hash or block height. Within the disclosed information, the Tornado Cash deposit stands as the main destination identified by PeckShieldAlert.
Small transfers were sent to a dead address
PeckShieldAlert also stated that the exploiter sent 0.0221 BNB and 0.0411 ETH to a dead address. The original wording used “dead address” for the receiving address type, and the two reported transfer amounts were 0.0221 BNB and 0.0411 ETH. The post did not display the full dead address, did not state the purpose of those transfers, and did not provide a detailed sequence connecting the two small transfers with the larger Tornado Cash deposit.
The timeline available from the public report is limited but direct: on June 20, 2026, at 12:46, PeckShieldAlert posted that the OLPC/LABUBU pool on PancakeSwap had been exploited; the loss was estimated at about $1.1 million; the exploiter bridged the stolen funds to Ethereum; 633.4 ETH was deposited into Tornado Cash; and 0.0221 BNB plus 0.0411 ETH were sent to a dead address. Foresight’s listed publication time for the item is 2026-06-20T12:51:52.000Z.
Based only on the information included in the source item, the disclosed facts are the name of the affected pool, the platform, the chain reference, the approximate loss amount, the cross-chain movement to Ethereum, the Tornado Cash deposit amount, and the two small transfers to a dead address. The source item does not contain the exploit method, vulnerability details, attacker address list, project-side remediation steps, or recovery status.