Bunni - Rekt

Bunni, a DeFi protocol on Uniswap V4, lost about $8.4 million on September 1 to an attacker who exploited a rounding and precision bug in its custom Liquidity Distribution Function. BlockSec flagged about $2.3 million in losses on Ethereum, and CertiK identified the same pattern on Unichain, bringing the total to $8.4 million. The attacker drained the USDC/USDT pool on Ethereum and the ETH/weETH pool on Unichain, then bridged much of the funds to Ethereum in 100 ETH transfers via Across Protocol. The article also says Cyfrin's June 2025 audit warned that more complex bugs were likely and that more security work was needed before scaling, while TVL rose from $2.4M to $23.9M after that audit.