PancakeSwap AMM Flash Loan Risk Scored High by dev.to
PancakeSwap (CAKE)
Editor:
Eugene Serbin
A senior DeFi security researcher at dev.to published an analysis on 3 October 2026 regarding flash loan attack vectors in the PancakeSwap Automated Market Maker. The protocol, which holds approximately $1.91 billion in total value locked across Ethereum and L2 networks, relies on immutable contracts for its low-fee swaps and yield farming. Flash loans allow attackers to borrow large sums without collateral to manipulate on-chain state and extract value through price manipulation or oracle abuse.
The research examined contract versions v2.5 through v2.7, including the router, quoter, and multicall periphery. It also reviewed integration points with external price oracles such as Chainlink, TWAP, and internal pair-derived TWAP. The aggregate risk score for the current deployment was assessed at 7 out of 10, indicating a high-medium risk profile.
This rating suggests that immediate mitigation is required for the most critical vectors identified in the study. The analysis highlights that these vulnerabilities could be leveraged against the AMM contracts on Ethereum and L2 roll-ups like Arbitrum and Optimism.
How the market reacted
Whalio's own Binance spot order flow for CAKE, measured when this story was written up on 3 October 2026. Not the outlet's figures.
CAKE is trading at $2.49 with a 1-hour buy ratio of 54.4% and a 4-hour ratio of 51.3%, compared to a 24-hour ratio of 53.3%. The 1-hour volume delta is positive at $12,446, while the 4-hour delta stands at $20,242. Over the last 24 hours, the volume delta reached $416,045, with a cumulative volume delta of $359,095 by close. Buyers dominated for 17 of the last 24 hours, contributing to a total spot volume of $6,576,885 across 62,655 trades. The 1-hour buying pressure is slightly stronger than the broader 24-hour trend, while the 4-hour data shows a more balanced market. Volume delta indicates the net difference between buy and sell volume, showing that buying pressure has been the dominant force in recent hours.
The latest daily buy ratio of 54.3% sits at the 87th percentile of the last 322 days, against a median of 50.6% - stronger buying than most days.
Was that an ordinary day?
The same Binance spot measurements for CAKE, averaged over the days leading up to the story.
Over the preceding week, the average buy ratio was 52.4%, with the latest day showing a 0.9 point increase over that average. Spot volume for the day was 0.86 times the weekly average, indicating lower-than-normal trading activity. Net buying occurred on 5 of the 7 days, contrasting with a price drop of 10.5% over the eight-day period. The total volume delta for the week was $2,812,335, showing consistent accumulation despite the price decline. This represents an unusual day for the coin, as the volume was below average while the buy ratio remained above the weekly mean.