PancakeSwap
PancakeSwap is the largest decentralized exchange (DEX) on BNB Chain: a set of smart contracts that let anyone swap tokens directly from their own wallet, with prices set by an automated market maker instead of an order book. Launched in September 2020 by a pseudonymous team, it is non-custodial, has expanded to several other chains, and is governed and rewarded through its CAKE token. Because listing is permissionless, it carries the scam-token and phishing risks common to every DEX.
- Launched
- September 2020, by a pseudonymous team2020-09 · source
- Model
- Non-custodial automated market maker (AMM); you trade from your own wallet
- Primary chain
- BNB Chain, with support extended to several other networks
- Token
- CAKE (governance, staking and rewards)
What is PancakeSwap?
PancakeSwap is the largest decentralized exchange on BNB Chain. Instead of an order book matching buyers and sellers, it uses an automated market maker (AMM): liquidity providers deposit pairs of tokens into pools, and traders swap against those pools at prices set by a formula. Because it is non-custodial and permissionless, you trade directly from your own wallet and no company holds your funds. It launched in September 2020, was built by a pseudonymous team, and has since expanded from BNB Chain to several other networks.
Its native token, CAKE, is used for governance, staking and rewards. The protocol has also shipped multiple versions: v2 established the standard AMM pools, v3 added concentrated liquidity so providers can focus capital in a chosen price range for better efficiency, and v4 introduces "hooks" — plug-in code that runs at points in a pool's lifecycle — for more customizable pools. As with other AMMs, the app usually routes your trade to whichever version gives the best price.
Is PancakeSwap safe?
PancakeSwap's core contracts are audited and have handled enormous volume since 2020 without the AMM itself being exploited to drain the protocol. Because it is non-custodial, there is also no company vault holding your funds to be hacked. That is the strong part of the picture, and it is the part people usually mean when they ask whether the protocol is sound.
The risks that remain are the ones inherent to any DEX. Listing is permissionless, so anyone can create a token and a pool — scam tokens, "honeypots" and rug pulls sit alongside legitimate ones, and checking what you are actually trading is on you. The other common way people lose money here is user-side, not a contract flaw: phishing sites that impersonate PancakeSwap and malicious approval prompts. The clearest example was March 2021, when attackers hijacked the DNS for PancakeSwap's domain and served a fake front-end that asked visitors for their seed phrase. The protocol and its smart contracts were never drained — the attack targeted users through a fraudulent website, and the team regained control the same day. Confirm you are on the official domain and read what you sign.
Incident record
On 15 March 2021 attackers hijacked the DNS for PancakeSwap's domain (alongside Cream Finance), redirecting visitors to a fake front-end that asked for their 12-word seed phrase to steal funds. The protocol and its smart contracts were not exploited or drained — the attack targeted users through a fraudulent website served at the real domain. The team regained control of the DNS the same day. Recorded with an n/a verdict because protocol and user funds held on-chain were not taken by any contract exploit.
In our ratings
Where we score PancakeSwap against its peers on open data. The number lives there, not here.
Compare with
Frequently asked
Is PancakeSwap safe?+
PancakeSwap's audited core contracts have handled large volume since 2020 without the AMM being exploited to drain the protocol, and because it is non-custodial no company holds your funds. The risks are those of any DEX: permissionless listing means scam and honeypot tokens exist, and phishing sites can trick you — as in the March 2021 DNS hijack, which served a fake front-end but did not drain the contracts. Check the token and confirm the official domain.
What is PancakeSwap?+
PancakeSwap is the largest decentralized exchange on BNB Chain, launched in September 2020. It is a non-custodial automated market maker: you swap tokens directly from your own wallet against liquidity pools, and its CAKE token is used for governance, staking and rewards.
Was PancakeSwap hacked?+
Its smart contracts have not been exploited to drain the protocol. In March 2021 attackers hijacked the DNS for its domain and served a phishing front-end that asked users for their seed phrase, but the contracts themselves were not drained and the team regained control the same day.
What is the difference between PancakeSwap v2, v3 and v4?+
v2 established standard AMM liquidity pools; v3 added concentrated liquidity so providers can focus capital in a chosen price range for better efficiency; v4 introduces customizable "hooks" that run at points in a pool's lifecycle. The app usually routes a trade to whichever version gives the best price.
What changed
- 2026-09-28Profile created: the AMM/BNB Chain/CAKE overview, the v2–v4 history, the safety picture with no protocol-level exploit on record, and the March 2021 DNS-hijack phishing event recorded with an n/a verdict.