Bunny and Qubit turns to DAO following $80 million bug exploit

The development team behind Bunny Finance and Qubit has decided to disband the protocol and turn it into a decentralized autonomous organization (DAO).

In an official medium post published on Friday, The Bunny Finance team announced that the exploit on Qubit that resulted in $80 million worth of loss has made it impossible for the team to operate at full scale. Thus, they have decided to disband the protocols and give authority to the community.

As reported earlier by Cointelegraph, the Qubit bridge called X-bridge facilitated tokens swaps from Ethereum (ETH) to Binance Smart Chain (BSC). The hacker behind the attack managed to exploit a "logical error” in the X-Bridge smart contract that allowed them to withdraw tokens on the BSC chain without depositing any on Ethereum.

pic.twitter.com/G1WOMglVUU

— Qubit Finance (@QubitFin) January 28, 2022

The hacker managed to steal 77,162 qXETH worth $185 million and used it as collateral to borrow several assets from the lending pools worth $80 million. The borrowed tokens included 15,688 Wrapped Ether (wETH) worth $37.6 million, 767 BTC-B ($28.5 million), $9.5 million worth of stablecoin and $5 million worth of PancakeSwap (CAKE), Pancake Bunny (BUNNY) and MDX tokens.

Related: Wormhole token bridge loses $321M in largest hack so far in 2022

The official announcement noted that moving forward, the community will be in charge of major decision making including upgrading contracts, altering fee structure. In order to change the protocols to DAO, the development team has shut down vaults on Bunny which will no longer mint the native token. The team is also shutting down leveraged Farming Vaults and Single Asset Vaults on Qubit that were used to borrow assets.

The development team has also decided to discontinue major fee structures barring unstaking and compounding fees. The team would also launch a new market on Qubit and get rid of the old model that was hacked. All team tokens would be locked in a community smart contract and profits from the contract would be utilized as a compensation pool. The existing members of the team would participate as a member of the DAO.

Alchemix patches ‘Reverse Rug’ exploit, address $6.5 million shortfall   June 16, 2021
Alpha Homora loses $37 million following Iron Bank exploit   Feb. 13, 2021
As Yearn.Finance’s yield vaults grow, ‘crop’ projects define boundaries   June 15, 2021
A million down, a billion to go: How does DeFi reach mass adoption?   Dec. 7, 2020
Aurora pays $6M bug bounty to ethical security hacker through Immunefi   June 7, 2022