Slam Token Team Helps Resolve Critical Localization Bug on PancakeSwap

PancakeSwap got help from a whitehat proving their ability to work through errors and maintain capacity

Bug Fixed

On June 8th, PancakeSwap fixed a critical error in their software with the help of an anoymous member of the Slam token team ($Slam). Since the bug’s discovery on May 21, there have not been any reports of suspicious activity related. The bug would have allowed any malicious user to insert arbitrary text on PancakeSwap’s website. As PancakeSwap is the largest decentralized exchange(DEX) operating on Binance Smart Chain, the resolution is a welcoming sign given recent attacks.


PancakeSwap was first alerted of the bug in their protocol by the whitehat Kadabra from the $SLAM Token informed the team. PancakeSwap paid the whitehat a total of $7,500 for helping them locate the critical error. At the time, the bug was rated a critical error. 

The bug in question focused on a service PancakeSwap uses known as Crowdin, a localization management platform. Localization is the process of translating a website’s text into the preferred language of a user and the error was the result of a bugged API key that was being used to create custom localizations. 

The Bugged API 

The bugged API key was not a read-only API key, but rather had full write access to the entire system. This means that a bad actor could create a new localization and overwrite existing localizations, including English, the main language used on PancakeSwap’s website. 

If a bad actor were to rewrite the existing localizations, they could inject arbitrary content. For example, a malicious user could have changed the text on the site to ask users to exchange or pump for a particular token. Luckily, PancakeSwap was all over it and solved the problem without any issue.

Concluding Thoughts

PancakeSwap is one of the largest decentralized exchanges on the Binance Smart Chain network. Hearing news about bugs and glitches in a protocol is typically never a good thing. In this case, PancakeSwap demonstrated their fast reaction time and dedication to fixing the error and improving their platform. Some older crypto investors genuinely believe that the best way to develop a protocol is to face challenges and errors to see if it can grow and improve upon itself. PancakeSwap has appeared to have passed another “challenge.” The ability of the PancakeSwap developer team to adjust and reconfigure effectively shows the PancakeSwap community has a great, ready defense guarding their investments. 


About PancakeSwap

PancakeSwap is a Binance Smart Chain-based DEX that was launched by anonymous devs with a love for breakfast foods and rabbits. It resembles Ethereum’s SushiSwap, community governance with the ability to farm liquidity provider tokens and incorporates many other features and benefits that let users earn rewards. The protocol has been relatively exploit-free in its history, which has been positive for the growth of its following.

Source :

Leave a Reply

Your email address will not be published. Required fields are marked *