Cream Finance Loses $25 Million To A Flash Loan Attack

2021-8-31 01:00

PeckShield reported through a tweet of the new hack on Cream Finance. The blockchain security company said a flash loan attack on the decentralized finance lending and borrowing protocol.

#FlashLoanAlert https://t.co/JPW7e368qd

— PeckShield Inc. (@peckshield) August 30, 2021

PeckShield explained that the hacking came through a 500 Ethereum flash loan from the attacker. This was used to infiltrate a reentrancy bug in the smart contract of the Flex Network. Usually, flash loans being undercollateralized can be borrowed and repaid within a single transaction.

Related Reading | Cryptocurrency Firms In Switzerland To Offer Tokenized Products On Tezos

As a DeFi protocol for lending, Cream Finance allows users to earn interest from their deposited assets. Though Cream Finance is a fork of the Compound protocol, its operation is quite different from Compound or Aave. The platform has several more markets for some esoteric digital assets.

1/4 @CreamFinance was exploited in (one hack tx: https://t.co/JPW7e368qd), leading to the gain of ~$18.8M for the hacker.

— PeckShield Inc. (@peckshield) August 30, 2021

This attack on Cream Finance was exploitation involving 1,308 Ethereum and over 418 million AMP, the native token of Flexa Network. According to PechShield, the Ethereum records reveal that over $6 million were hacked at 5:44 UTC.

Cream Finance Becomes Another DeFi Protocol Hacked In 2021

Furthermore, the Cream Finance team members confirmed the authenticity of the hacking reporting. Then, reporting on Discord Channel, the project’s official channel, the members started working with PeckShield.

The team revealed that the hacking was on the CREAM v1 market on the Ethereum Blockchain. Furthermore, they mentioned that it’s through the reentrancy of the contract on the AMP token.

At the time of writing, AMP’s value has dipped by 15% within few hours to $0.05. Also, the value of Cream Finance’s native token, CREAM, plummeted by about 6%.

However, ETH is at $3, 190.46 showing a slight dipping within the last 24 hours. The total amount of the Crean Finance hacking is more than $25 million. The address of the hackers shows that they presently have about $18.8 million.

Amidst the hack, Cream Finance is down by 6% | Source: CREAMUSD on TradingView.com

The Cream Finance team has put a stop to any further loss. The team said that it now has a pause on AMP’s supply and borrow. It further acknowledged that the hack doesn’t affect any other market. Eason Wu, the protocol’s production Manger, disclosed this information on Discord.

Recall that earlier in the year; Cream Finance had a huge hack. The attack led to the loss of $37.5 million worth of digital assets. According to the report, the earlier hacking had a root cause from the exploitation of Alpha Finance.

Related Reading | Reports Show 45% Surge In Stock And Cryptocurrency Sign-Ups Across Rural Areas In India

Flash loans have remained one of the controversial features of decentralized finance. This’s because there’s no collateral needed for the loans, and hence, they are susceptible to hacks. This accounts for the recent attacks and hacks of flash loans.

A similar incident is a hack on the Bilaxy crypto exchange on August 28. The exchange had a huge hot wallet hack that compromised about 295 ERC-20 tokens. Also, a hack on Liquid on August 19 resulted in a loss of about $100 million.

Featured image from Pixabay, chart from TradingView.com

Similar to Notcoin - TapSwap on Solana Airdrops In 2024

origin »

Wish Finance (WSH) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 WSH

finance attack cream loan flash said security

finance attack → Результатов: 80


DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised

Websites of DeFi projects Cream.Finance and PancakeSwap reportedly came under attack by hackers. According to their tweets, the projects’ DNS had been compromised. Users who visited the websites of The post DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised appeared first on AMBCrypto.

2021-3-16 20:25


Warp Finance Re-Launches After Successful Reimbursement of Hacked Funds

Warp Finance, a protocol enabling liquidity provisioning (LP) tokens to be used as collateral for stablecoin loans, is re-launching after a successful recovery and reimbursement of hacked funds. This novel platform was the unfortunate victim of a flash loan attack, an increasingly prevalent problem in the decentralized finance (DeFi) space whereby hackers are able to essentially cheat the protocol and pull large amounts of money out of it. Warp carried out a quick and sweeping […]

2021-2-10 19:46


Фото:

Warp Finance Comes Back with a Vengeance Following Hack

While hacks and other cyberattacks can often be devastating in today’s digital era, decentralized finance (DeFi) startup Warp Finance bounced back from a recent flash loan attack in record time.  Warp Finance’s Warp Protocol allows liquidity provisioning (LP) tokens to collateralize stablecoin loans, a totally novel function that provides its users with significant value. However,Read More

2021-2-8 21:14


Фото:

В новом DeFi-протоколе создателя yEarn.Finance обнаружили критическую уязвимость

Эксплойт, обнаруженный в смарт-контракте запущенного накануне DeFi-проекта yCredit, позволяет вывести все средства пользователей, заявил блокчейн-разработчик Нур Хариди. IMPORTANT The yCredit contract is vulnerable to an economic attack that can cause loss of all user funds.

2021-1-3 18:08


Yearn Finance Consumes Pickle Without Governance Vote

The move follows a hack over the weekend that resulted in the loss of $20 million in stablecoins, however, the community had no say in the decision. Yearn Finance has partnered, or rather absorbed, Pickle Finance in an effort to increase rewards for stakers and reimburse some of the victims of the flash loan attack … Continued The post Yearn Finance Consumes Pickle Without Governance Vote appeared first on BeInCrypto.

2020-11-26 17:13


Nearly $20M Drained from DAI Pickle Jar in A ‘Very Complicated Attack’ on its Latest Version

Deposits in the DeFi project Pickle Finance have come down to $23.6 billion from $163 million on Nov. 5th and an all-time high of $344.5 billion on 16th Sept. So, the decline that came after the exploit the project experienced over the weekend didn’t affect it much, as the funds are around the level they were […] The post Nearly M Drained from DAI Pickle Jar in A ‘Very Complicated Attack’ on its Latest Version first appeared on BitcoinExchangeGuide.

2020-11-23 17:18