Cream Finance Loses $25M in Flash Loan Attack

2021-8-30 13:01

Decentralized finance (DeFi) lending platform CREAM Finance lost $25 million in a flash loan attack, the second in the past six months.

Blockchain security company PeckShield Inc. first broke the news on Twitter, citing data from Etherscan. Shortly thereafter, Cream confirmed the exploit that resulted in a loss of 418,311,571 in AMP and 1,308.09 in ETH. Combined, this amounts to roughly $25 million at today’s exchange rates. While AMP seems to have suffered, falling 15% since the news broke, Ethereum remains relatively unaffected at around $3,200.

The platform also reportedly ceased the exploitation by pausing supply and borrowing on AMP. According to the initial investigation, with the help of PeckSheild, the exploit occurred through reentrancy on the AMP token contract.

Second attack in six months

The latest attack must be particularly frustrating for the DeFi lending platform, coming within just six months of another attack. In February, Cream experienced a similar flash loan attack losing roughly $37.5 million worth of cryptocurrency. Specifically, it lost 13,200 wETH, 3.6 million USDC, 5.6 million USDT, and 4.2 million DAI. 

The funds had been exploited through Alpha Hamora, an Ethereum protocol for leveraging your position in yield farming pools. Alpha Labs then proceeded to work with YFI founder Andre Cronje and Cream Finance to investigate the stolen funds. At the time, a prime suspect had been identified.

CREAM developments

Despite experiencing flash loan attacks, Cream has been developing steadily. In April, Cream introduced collateral-free protocol-to-protocol flash loans with Iron Bank. They were also significantly cheaper, with interest at 0.03% compared to 0.09% on AAVE and 0.3% on Uniswap. It also automated the entire process through smart contracts to prevent lenders from defaulting.

At the time, Iron Bank had recorded $435 million in total value locked (TVL). Additionally, Cream Finance launched on the Polygon blockchain in June to facilitate faster transactions, lower gas fees, and access to different markets for its users.

The post Cream Finance Loses $25M in Flash Loan Attack appeared first on BeInCrypto.

Similar to Notcoin - TapSwap on Solana Airdrops In 2024

origin »

Wish Finance (WSH) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 WSH

finance attack loan flash cream loses 25m

finance attack → Результатов: 78


DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised

Websites of DeFi projects Cream.Finance and PancakeSwap reportedly came under attack by hackers. According to their tweets, the projects’ DNS had been compromised. Users who visited the websites of The post DeFi project DNS hijack attack: PancakeSwap regains access; Cream’s website still compromised appeared first on AMBCrypto.

2021-3-16 20:25


Warp Finance Re-Launches After Successful Reimbursement of Hacked Funds

Warp Finance, a protocol enabling liquidity provisioning (LP) tokens to be used as collateral for stablecoin loans, is re-launching after a successful recovery and reimbursement of hacked funds. This novel platform was the unfortunate victim of a flash loan attack, an increasingly prevalent problem in the decentralized finance (DeFi) space whereby hackers are able to essentially cheat the protocol and pull large amounts of money out of it. Warp carried out a quick and sweeping […]

2021-2-10 19:46


Фото:

Warp Finance Comes Back with a Vengeance Following Hack

While hacks and other cyberattacks can often be devastating in today’s digital era, decentralized finance (DeFi) startup Warp Finance bounced back from a recent flash loan attack in record time.  Warp Finance’s Warp Protocol allows liquidity provisioning (LP) tokens to collateralize stablecoin loans, a totally novel function that provides its users with significant value. However,Read More

2021-2-8 21:14


Фото:

В новом DeFi-протоколе создателя yEarn.Finance обнаружили критическую уязвимость

Эксплойт, обнаруженный в смарт-контракте запущенного накануне DeFi-проекта yCredit, позволяет вывести все средства пользователей, заявил блокчейн-разработчик Нур Хариди. IMPORTANT The yCredit contract is vulnerable to an economic attack that can cause loss of all user funds.

2021-1-3 18:08


Yearn Finance Consumes Pickle Without Governance Vote

The move follows a hack over the weekend that resulted in the loss of $20 million in stablecoins, however, the community had no say in the decision. Yearn Finance has partnered, or rather absorbed, Pickle Finance in an effort to increase rewards for stakers and reimburse some of the victims of the flash loan attack … Continued The post Yearn Finance Consumes Pickle Without Governance Vote appeared first on BeInCrypto.

2020-11-26 17:13


Nearly $20M Drained from DAI Pickle Jar in A ‘Very Complicated Attack’ on its Latest Version

Deposits in the DeFi project Pickle Finance have come down to $23.6 billion from $163 million on Nov. 5th and an all-time high of $344.5 billion on 16th Sept. So, the decline that came after the exploit the project experienced over the weekend didn’t affect it much, as the funds are around the level they were […] The post Nearly M Drained from DAI Pickle Jar in A ‘Very Complicated Attack’ on its Latest Version first appeared on BitcoinExchangeGuide.

2020-11-23 17:18