Yield Aggregator · Review
ActiveBunny Review 2026: BNB Chain Yield Optimizer With a Hack History
Bunny, also known as PancakeBunny, is a yield optimizer on BNB Chain and Polygon that auto-compounds farming rewards. It is small today and carries a 2021 exploit in its history.
By the DappsAtlas editorial team · Updated
DappsAtlas score
5.2/10
Mixed
Our verdict on Bunny
5.2/10Bunny suits experienced DeFi users who already understand yield farming and want auto-compounding on BNB Chain or Polygon without managing harvests by hand. Its main strength is automating a repetitive, gas-heavy task. The main caveat is trust: a 2021 exploit, a small TVL of about $3.8M and thin homepage detail mean it deserves cautious sizing. Read the audits and docs first, and never deposit more than you can afford to lose.
Score breakdown
How Bunny scores
- Security
- 4.5/10
- Ease of use
- 6.5/10
- Fees
- 5.0/10
- Features
- 5.5/10
Scores run from 0 to 10 and are based only on facts we could verify. Where information was missing we mark the score n/a rather than guess.
What is Bunny?
Bunny, branded as PancakeBunny, is a DeFi yield farming aggregator and optimizer. Its homepage calls it the "No 1. Yield Optimizer", a claim the project does not back up. DefiLlama files it under Yield and lists BNB Chain and Polygon.
The protocol began around the PancakeSwap ecosystem, and its GitHub description says it helps CAKE holders earn more CAKE. DefiLlama shows about $3.8 million in total value locked, down 1.8% over seven days, so it is a small protocol today.
The project is best known in security circles for a 2021 exploit, covered by Merkle Science's Hack Track. Bunny Finance said the attacker added a large amount of BNB into the system via the PancakeSwap USDT-WBNB pool. Anyone considering it should weigh that history against the two audits DefiLlama lists.
How Bunny works
Yield farming means supplying tokens to a protocol, often a liquidity pool, and earning reward tokens. Those rewards only grow if they are harvested, sold and reinvested, and each step costs gas.
Bunny pools user deposits in vaults and performs the harvest-and-reinvest cycle on everyone's behalf. Because the cost is shared, compounding can happen more often than most individuals could manage. The docs excerpt notes that compounding takes 4-5 steps, which is the transaction cost it is built to spread across users.
The BUNNY token ties into the incentive design: the docs say around 25% of profits will be bonuses. Returns depend on the underlying farms, token prices and the vault contracts working as intended.
5 features
Key features
01
Auto-compounding vaults
Deposits are pooled and rewards are compounded automatically, so users do not need to harvest and reinvest manually.
02
Yield farming aggregation
The project aggregates yield farming opportunities, starting from PancakeSwap's CAKE ecosystem, and routes deposits into them.
03
Multi-chain presence
DefiLlama lists deployments on BNB Chain and Polygon.
04
BUNNY token incentives
The BUNNY token is tied to profit bonuses, with the docs stating around 25% of profits go to bonuses.
05
Public code and audits
DefiLlama lists two audits, and the contract code is published in a public GitHub repository.
Pros and cons
What we like
- Automates harvesting and compounding, which saves time and gas.
- Code is published openly on GitHub and the project has public documentation.
- DefiLlama lists two audits.
- Runs on BNB Chain and Polygon, where transaction costs are generally low.
- Has a long track record since the 2021 DeFi farming wave, with TVL still present.
Watch out for
- Suffered a widely reported exploit in 2021 tied to manipulation of the PancakeSwap USDT-WBNB pool, which damaged trust.
- TVL of about $3.8M is small, which suggests limited current activity.
- Homepage is minimal, so current product details are hard to verify without opening the app and docs.
- Auto-compounding adds smart-contract risk on top of the underlying farm's own risk.
- Fee and bonus mechanics depend on the BUNNY token, which adds token-price exposure.
- Only two audits are listed, and the project does not say who did them or what they covered.
Bunny fees
Detailed fee percentages are not published. The docs excerpt says transaction costs assume 4-5 steps to compound deposits, and that around 25% of Bunny's profits will be bonuses, with some share tied to the BUNNY token.
Users should check the vault pages and documentation for performance fees, withdrawal fees and network gas costs before depositing. Gas on BNB Chain and Polygon is typically low compared with Ethereum mainnet.
Is Bunny safe?
DefiLlama lists two audits, but the project does not name the auditors or the scope. The code is public on GitHub, which allows independent review. Deposits sit in smart contracts, so users face contract risk, oracle and price-manipulation risk, and exposure to the underlying farms.
Bunny has a documented incident: a 2021 exploit involving the PancakeSwap USDT-WBNB pool, analysed by Merkle Science. That shows how composability and price manipulation can hit yield optimizers. No regulatory status or custody details beyond self-custody smart-contract use are stated publicly. Use a dedicated wallet, check approvals, and keep deposits small.
6 steps
How to get started with Bunny
- 1
Read the current documentation and confirm which networks and vaults are live.
- 2
Check the audit reports and the history of the 2021 exploit so you understand the risks.
- 3
Set up a self-custody wallet and fund it with the tokens the vault needs plus a little BNB or MATIC for gas.
- 4
Connect the wallet to the official site only, and verify the URL.
- 5
Start with a small deposit in one vault and check how rewards and fees are displayed.
- 6
Monitor the position and withdraw if the vault, token or protocol shows warning signs.
Who Bunny is for
Bunny is for experienced DeFi users comfortable with smart-contract risk who want automated compounding on BNB Chain or Polygon. It is not suited to beginners, to people who need guaranteed returns, or to anyone uneasy with a protocol that has a past exploit.
Bunny FAQs
What is Bunny (PancakeBunny)?
Bunny, also known as PancakeBunny, is a DeFi yield farming aggregator and optimizer. It automates compounding of farming rewards so users do not have to harvest and reinvest by hand. DefiLlama lists it on BNB Chain and Polygon.
Is Bunny safe to use?
It has a documented security incident. A 2021 exploit involving the PancakeSwap USDT-WBNB pool was covered by blockchain analytics firms, and Bunny Finance said the attacker pushed a large amount of BNB into the system. DefiLlama lists two audits, but audits do not remove smart-contract risk, so only deposit what you can afford to lose.
What is the BUNNY token used for?
The BUNNY token is listed on DefiLlama under the ticker BUNNY. The docs say around 25% of Bunny's profits will be bonuses, and some portion is tied to the token. Check the current docs for the exact mechanics.
How does Bunny make yield?
The docs snippet says transaction costs assume it takes 4-5 steps for Pancake Bunny to compound deposits, which is why pooled compounding can save gas. Exact current performance and withdrawal fees are not public, so check the app before depositing.
Which blockchains does Bunny support?
DefiLlama lists BNB Chain and Polygon. The homepage metadata mentions Binance Smart Chain and Ethereum, so confirm in the app which networks are currently supported.
Compare
Bunny alternatives
Convex Finance is a DeFi yield platform that boosts rewards for Curve, Frax and f(x) liquidity providers and lets CVX lockers vote on emissions.
Vesper is a multi-chain yield aggregator where users deposit into pools to earn yield, with institutional and protocol integration services.
vfat.io is a non-custodial, multi-chain yield aggregator and portfolio manager built on the Sickle smart contract wallet, for active DeFi farmers.
Aura Finance is a Balancer-based yield and governance booster for liquidity providers and BAL stakers, using the AURA token across nine chains.
Superform is a multi-chain yield aggregator and onchain wealth app that offers automated SuperVaults and 800+ earning options, plus the UP governance token.
Harvest Finance is a DeFi yield aggregator and APY index tracking 101 strategies across five networks, for users comparing onchain yields.
Same category
More Yield Aggregators
Yearn Finance is a DeFi yield aggregator whose automated vaults deposit crypto into on-chain strategies to earn compounding yield for self-custody users.
Lulo is a non-custodial Solana stablecoin yield aggregator that spreads deposits across lending protocols with a built-in coverage layer.
Spark Savings is a Sky ecosystem savings product where users deposit stablecoins and other assets to earn a variable yield tied to the Sky Savings Rate.
Origin ARM is a set of Origin Protocol vaults that earn yield by buying discounted redeemable assets and redeeming them at par, for ETH and stablecoin holders.
infiniFi is an on-chain stablecoin yield protocol where users mint iUSD and either stake it for liquidity or lock it for higher yield.
DeFindex is a non-custodial stablecoin yield infrastructure on Stellar that lets wallets, neobanks and fintech apps add savings vaults via API.
Same chain
More on BNB Chain
Aave V3 is a non-custodial DeFi lending protocol on 21 chains where users earn interest on deposits or borrow against collateral.
Uniswap V4 is the latest Uniswap DEX version with hooks and concentrated liquidity, running on 22 chains for self-custody token swaps and liquidity provision.
Uniswap V3 is a non-custodial decentralized exchange protocol for token swaps and concentrated liquidity provision across 40+ chains.
LayerZero V2 is a cross-chain messaging protocol and bridge infrastructure for developers and asset issuers, connecting dozens of blockchains.
Morpho Blue is a permissionless lending primitive with about $11.4 billion in TVL on DefiLlama, accessed mainly through curated vaults.
Uniswap V2 is a non-custodial automated market maker DEX on 17 chains for token swaps and liquidity provision, with about $938M TVL.
Guides
Guides about Bunny
Presale and ICO
Bunny Planet and the APENFT Launchpad: A Buyer's GuideBunny Planet is described as the first project to launch through the APENFT marketplace launchpad. The public sources reviewed for this guide do not confirm the details of that launch, so this explainer covers what APENFT is, how a marketplace launchpad works, and what buyers should check before taking part in any project it hosts.
NFT
Rogue Bunnies NFT Project and the $Bunni Token ExplainedRogue Bunnies is a community-led lifestyle NFT project with a $Bunni token, and the public record on it is thin. This guide explains what is known, what is not confirmed, and how to check an official launch before you buy or trust anything.
How we checked
Sources
Last updated . Spotted an error? Tell us and we will correct it.