Cream Finance Loses $25 Million To A Flash Loan Attack

2021-8-31 01:00

PeckShield reported through a tweet of the new hack on Cream Finance. The blockchain security company said a flash loan attack on the decentralized finance lending and borrowing protocol.

#FlashLoanAlert https://t.co/JPW7e368qd

— PeckShield Inc. (@peckshield) August 30, 2021

PeckShield explained that the hacking came through a 500 Ethereum flash loan from the attacker. This was used to infiltrate a reentrancy bug in the smart contract of the Flex Network. Usually, flash loans being undercollateralized can be borrowed and repaid within a single transaction.

Related Reading | Cryptocurrency Firms In Switzerland To Offer Tokenized Products On Tezos

As a DeFi protocol for lending, Cream Finance allows users to earn interest from their deposited assets. Though Cream Finance is a fork of the Compound protocol, its operation is quite different from Compound or Aave. The platform has several more markets for some esoteric digital assets.

1/4 @CreamFinance was exploited in (one hack tx: https://t.co/JPW7e368qd), leading to the gain of ~$18.8M for the hacker.

— PeckShield Inc. (@peckshield) August 30, 2021

This attack on Cream Finance was exploitation involving 1,308 Ethereum and over 418 million AMP, the native token of Flexa Network. According to PechShield, the Ethereum records reveal that over $6 million were hacked at 5:44 UTC.

Cream Finance Becomes Another DeFi Protocol Hacked In 2021

Furthermore, the Cream Finance team members confirmed the authenticity of the hacking reporting. Then, reporting on Discord Channel, the project’s official channel, the members started working with PeckShield.

The team revealed that the hacking was on the CREAM v1 market on the Ethereum Blockchain. Furthermore, they mentioned that it’s through the reentrancy of the contract on the AMP token.

At the time of writing, AMP’s value has dipped by 15% within few hours to $0.05. Also, the value of Cream Finance’s native token, CREAM, plummeted by about 6%.

However, ETH is at $3, 190.46 showing a slight dipping within the last 24 hours. The total amount of the Crean Finance hacking is more than $25 million. The address of the hackers shows that they presently have about $18.8 million.

Amidst the hack, Cream Finance is down by 6% | Source: CREAMUSD on TradingView.com

The Cream Finance team has put a stop to any further loss. The team said that it now has a pause on AMP’s supply and borrow. It further acknowledged that the hack doesn’t affect any other market. Eason Wu, the protocol’s production Manger, disclosed this information on Discord.

Recall that earlier in the year; Cream Finance had a huge hack. The attack led to the loss of $37.5 million worth of digital assets. According to the report, the earlier hacking had a root cause from the exploitation of Alpha Finance.

Related Reading | Reports Show 45% Surge In Stock And Cryptocurrency Sign-Ups Across Rural Areas In India

Flash loans have remained one of the controversial features of decentralized finance. This’s because there’s no collateral needed for the loans, and hence, they are susceptible to hacks. This accounts for the recent attacks and hacks of flash loans.

A similar incident is a hack on the Bilaxy crypto exchange on August 28. The exchange had a huge hot wallet hack that compromised about 295 ERC-20 tokens. Also, a hack on Liquid on August 19 resulted in a loss of about $100 million.

Featured image from Pixabay, chart from TradingView.com origin »

Bitcoin price in Telegram @btc_price_every_hour

Wish Finance (WSH) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 WSH

finance attack cream loan flash said security

finance attack → Результатов: 80


DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised

Websites of DeFi projects Cream.Finance and PancakeSwap reportedly came under attack by hackers. According to their tweets, the projects’ DNS had been compromised. Users who visited the websites of The post DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised appeared first on AMBCrypto.

2021-3-16 20:25


Warp Finance Re-Launches After Successful Reimbursement of Hacked Funds

Warp Finance, a protocol enabling liquidity provisioning (LP) tokens to be used as collateral for stablecoin loans, is re-launching after a successful recovery and reimbursement of hacked funds. This novel platform was the unfortunate victim of a flash loan attack, an increasingly prevalent problem in the decentralized finance (DeFi) space whereby hackers are able to essentially cheat the protocol and pull large amounts of money out of it. Warp carried out a quick and sweeping […]

2021-2-10 19:46


Фото:

Warp Finance Comes Back with a Vengeance Following Hack

While hacks and other cyberattacks can often be devastating in today’s digital era, decentralized finance (DeFi) startup Warp Finance bounced back from a recent flash loan attack in record time.  Warp Finance’s Warp Protocol allows liquidity provisioning (LP) tokens to collateralize stablecoin loans, a totally novel function that provides its users with significant value. However,Read More

2021-2-8 21:14


Фото:

В новом DeFi-протоколе создателя yEarn.Finance обнаружили критическую уязвимость

Эксплойт, обнаруженный в смарт-контракте запущенного накануне DeFi-проекта yCredit, позволяет вывести все средства пользователей, заявил блокчейн-разработчик Нур Хариди. IMPORTANT The yCredit contract is vulnerable to an economic attack that can cause loss of all user funds.

2021-1-3 18:08


On Collusion

Special thanks to Glen Weyl, Phil Daian and Jinglan Wang for review Over the last few years there has been an increasing interest in using deliberately engineered economic incentives and mechanism design to align behavior of participants in various contexts.

2019-4-5 04:03