BlockBeats reported on June 20 that, according to monitoring by PeckShield, an OLPC/LABUBU liquidity pool on PancakeSwap on BNB Chain was attacked. The incident caused losses of about $1.1 million. The affected pool was a specific OLPC/LABUBU liquidity pool on PancakeSwap, the decentralized trading platform operating on BNB Chain.
Stolen funds moved to Ethereum and deposited into Tornado Cash
PeckShield’s monitoring showed that after the attack, the attacker bridged the stolen funds to the Ethereum network. The attacker then deposited 633.4 ETH into Tornado Cash. Tornado Cash is referenced in the report as the destination for the ETH after the cross-chain transfer.
In addition to the Tornado Cash deposit, the attacker also sent 0.0221 BNB and 0.0411 ETH to a so-called “black hole address,” described in the source as an unusable burn address. The report did not provide further technical details about how the OLPC/LABUBU liquidity pool was exploited.