The breach came to light when security firm Blocksec traced suspicious outflows from Bunni’s Ethereum contracts into a single wallet. By the time the dust settled, the address was sitting on more than $2.3 million — roughly split between USDC and USDT.
Panic spread quickly through the community. One of Bunni’s core contributors urged users to exit immediately, warning that funds left on the protocol could be at risk.
Hours later, the project confirmed the incident, announcing via X that all smart contract activity across networks had been paused while investigations are underway.
Bunni, a DEX designed around Uniswap V4 architecture, has promoted itself as a way to squeeze higher yields from liquidity pools using adaptive incentives.
