PancakeSwap

PancakeSwap announced it is proactively upgrading the security design of its infrastructure and running a full round of internal checks, citing rising security incidents across DeFi. Because the work touches the contracts that handle trading fee buybacks, this week's trading fee buyback & burn has been postponed to Monday, Nov 16.

The exchange clarified that PancakeSwap and user funds are not affected, and that trading, liquidity and all other products continue operating normally.

• Burn of this week's unused CAKE emissions still goes ahead as normal
• This week's trading fee buyback & burn will be carried forward and executed in full on the new date
• Message posted on the official X account on Nov 9

PancakeSwap said it is not affected by the Web3Auth security incident, stating that funds and smart contracts on its platform are safe. The reassurance was posted on the exchange's official X account.

The statement comes as a security issue affecting Web3Auth's embedded wallet services — tied to social-login wallets — prompted partners such as Keplr and MetaMask to pause or disable affected login/signing features. PancakeSwap joins other platforms that issued similar "not affected" statements during the incident.

• PancakeSwap: no impact on platform or user funds
• Incident centers on Web3Auth services used by third-party wallets, not PancakeSwap's own stack

PancakeSwap activated The Flip on Robinhood Chain, the first chain in the rollout, so every v3 and Infinity pool there now pays LPs 88% of swap fees automatically. The rollout continues across the other supported chains in phases, in an order designed to protect CAKE, with users of tokenized stocks and ETFs noting the milestone — over 1,000,000 wallets have now traded them on the exchange.

The governance-passed plan was confirmed in the exchange's monthly recap after a weeks-long vote: LP fee share rises from 66–68% on most pools to 88%, with 12% going to protocol fees, and CAKE emissions are cut from 22,500 to 7,000 per day (~69%), with the difference redirected to a new ecosystem growth fund called the Pantry. v2 pools stay unchanged and keep burning CAKE.

PancakeSwap brought its documentation back online after temporarily taking it offline in response to a security incident affecting GitBook-hosted docs across the industry. The exchange says its own docs were not compromised and it has now moved them off GitBook to infrastructure it controls, with all existing links still working.

• Docs live again at PancakeSwap's new self-hosted location
• Follows the exchange's earlier precautionary takedown during the GitBook incident
• PancakeSwap previously confirmed no user funds or app functionality were affected

PancakeSwap launched Campaign Hub, a single page that aggregates its active campaigns, prize pools, airdrops and step-by-step participation instructions. The exchange announced the feature on its official X account, pitching it as an end to hunting across multiple tabs to find a campaign.

• One-page portal pulls together fresh campaigns, prize pools, airdrops and how-to-join details
• Announced via PancakeSwap's official X account with a link to the hub

PancakeSwap said it has not been affected by the security incident at Binance, which hit the exchange with unauthorized withdrawals and was reported as potentially the largest crypto theft on record (around $6.3 billion). The DEX stated its contracts and services are operating normally and that it stands with the Binance team and everyone responding to the incident.

• Reassurance posted on the official PancakeSwap X account the same day Binance disclosed the breach and suspended deposits and withdrawals while investigating
• Follows similar "not affected" statements from other platforms after the incident

LayerZero is ending support for opBNB, meaning CAKE bridging off opBNB via LayerZero will stop on Nov 23, 00:00 UTC. PancakeSwap is urging users holding CAKE on opBNB to bridge out to BNB Chain before the deadline — roughly four weeks away — and re-amplified the warning on X by retweeting BSCNews's coverage of it.

• Walkthrough posted on X: go to PancakeSwap's bridge, connect the opBNB wallet, select opBNB → BNB Chain, choose CAKE, confirm
• PancakeSwap warns about phishing attempts and asks users to verify links before connecting wallets

PancakeSwap is promoting its Dual Investment product as an onchain alternative to the version offered on centralized exchanges: set a target price, pick a settlement date, and earn either way. If the market hits the target, the position executes — buying the asset lower or selling higher — and if not, users collect yield while waiting.

The product is live on BNB Chain, launched with $ETH and expanded underlyings including BTC and BNB, with settlement dates up to 7 days out, available directly through PancakeSwap's interface. The exchange pushed the pitch on its official X account with a 'try it' link, framing the feature as the same familiar CEX product now available onchain.

• Underlyings so far: ETH, BTC, BNB
• Position either executes buy-low/sell-high at the target or earns yield while waiting

PancakeSwap's weekly ecosystem recap confirmed that voting is open on The Flip, the governance proposal that would let v3 and Infinity LPs keep 88% of swap fees while cutting CAKE emissions by ~69%. The same thread flagged two other updates:

• PancakeSwap Aggregator crossed $1B in routed volume over the past 30 days.
• Trading and holding bStocks now boosts users' Pre-Access subscription quotas — the exchange says trading, holding, LPing or staking bStocks all count toward quota.

Pre-Access campaigns are time-bound subscription events hosted by PancakeSwap that offer tokenized exposure to private companies ahead of potential listings, with third-party providers arranging the underlying exposure.

PancakeSwap issued a reassurance after the disclosure of two critical PHP remote-code-execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619, dubbed "PHP2Shell") prompted security warnings across the crypto industry. The exchange stated it does not use PHP anywhere in its tech stack, that its platform is not affected, and that user funds are safe.

• Statement posted on the exchange's official X account amid industry-wide patching alerts
• Follows warnings from security firms such as SlowMist and companies like Cloudflare about active attack traffic targeting PHP-based sites