DeFi tool Cream Finance hit for over $18 million. Suffers second hack in six months

2021-8-31 19:00

Decentralized finance (DeFi) lending protocol Cream Finance has announced it lost millions worth of Amp token (AMP) and Ethereum (ETH) in a recent flash loan attack.

The attack is being investigated by a blockchain security company PeckShield that discovered the exploited vulnerability and continues monitoring the flagged address.

No other markets affected

“C.R.E.A.M. v1 market on Ethereum has suffered an exploit, resulting in a loss of 418,311,571 in AMP and 1,308.09 in ETH, by way of reentrancy on the AMP token contract,” announced Cream Finance earlier today on Twitter, adding that the protocol has stopped the exploit by pausing supply and borrow on Amp token and that According to the protocol, no other markets were affected.

Built on Ethereum, Amp token supports a wide variety of use cases for collateralization.

Over $18 million lost due to a reentrancy bug

According to PeckShield a reentrancy bug introduced on Amp token contract enabled the flash loan attack.

The hacker used the bug “to re-borrow assets during its transfer before updating the first borrow.”

According to the blockchain security company, the hacker repeated the malicious maneuver in 17 different transactions and exited the attack with a total of 5,980 Ethereum (ETH), worth roughly $18.8 million at the time.

2/4 The hack is made possible due to a reentrancy bug introduced by $AMP, which is an ERC777-like token and exploited to re-borrow assets during its transfer before updating the first borrow. pic.twitter.com/oVg0w1FWFt

— PeckShield Inc. (@peckshield) August 30, 2021

As reported by PeckShield, the stolen funds are “still parked” and the company said that it is actively monitoring the flagged address for any movement.

Second hack in six months

Chinese blockchain journalist Colin Wu, who also reported on the heist, recalled that the protocol suffered a bigger flash loan attack six months ago.

Cream Finance was founded by Taiwan entertainment star Jeffrey Huang. In February, it was attacked by a flash loan and lost 37.5 million US dollars.

— Wu Blockchain (@WuBlockchain) August 30, 2021

Together with Alpha Finance DeFi protocol, Cream Finance fell victim to a $37,5 million exploit in February this year.

The price of Amp token plunged more than 14% percent in the first hours following the exploit, but has been recovering since.

Image via TradingView.

Despite general market sentiment warming up, the decentralized collateral token has been taking a beating lately, as its price fell more than 29% in the past 30 days.

The price of the Cream Finance (CREAM) governance token that dropped 6% as a result of the attack is still struggling to recover. 

Image via TradingView.

The post DeFi tool Cream Finance hit for over $18 million. Suffers second hack in six months appeared first on CryptoSlate.

Similar to Notcoin - Blum - Airdrops In 2024

origin »

Wish Finance (WSH) на Currencies.ru

$ 0 (+0.00%)
Объем 24H $0
Изменеия 24h: 0.00 %, 7d: 0.00 %
Cегодня L: $0 - H: $0
Капитализация $0 Rank 99999
Доступно / Всего 0 WSH

finance cream defi million hit tool ethereum

finance cream → Результатов: 51


Взломанный DeFi-протокол Cream Finance возместит $18 млн ущерба

Разработчики децентрализованного протокола Cream Finance возместят пострадавшим пользователям потери в результате недавней атаки с использованием мгновенных займов. Проект будет направлять на эту цель 20% комиссионных сборов, пока не будет погашена вся сумма.

2021-9-1 14:48


Хакеры вывели более $18 млн из DeFi-протокола Cream Finance

Децентрализованный протокол Cream Finance подвергся атаке с помощью мгновенного кредита и потерял свыше $18 млн. </p> 30 августа 2021 | 14:33Апдейт: Представители Cream Finance подтвердили факт атаки.

2021-8-30 11:06


DeFi “DNS Hijack:” Cream Finance Deployed to New Domain, PancakeSwap Regains Access

Decentralized finance (DeFi) protocols Cream Finance, and Binance Smart Chain (BSC) based PancakeSwap are reporting DNS (Domain Name System) “hijacks” of their respective platforms. Lending protocol Cream Finance tweeted on Monday, “Our DNS has been compromised by a third party; some users are seeing requests for seed phrase on http://app.

2021-3-16 20:22


yEarn.Finance объединяется с еще одним De-Fi проектом

Основатель DeFi-проекта yEarn. Finance Андре Кронье представил детали интеграции с лендинговым протоколом Cream, работающим по модели проектов Compound и Aave. Об этом он заявил спустя два дня после объединения yEarn.

2020-11-26 20:52


Фото:

yEarn.Finance вслед за Pickle Finance поглотит Cream Finance

Основатель DeFi-проекта yEarn. Finance Андре Кронье представил детали интеграции с лендинговым протоколом Cream, работающим по модели проектов Compound и Aave. Об этом он заявил спустя два дня после объединения yEarn.

2020-11-26 17:26


Мнение: Платформа Cream Finance находится под угрозой существования

Децентрализованная платформа Cream Finance может рухнуть под тяжестью токенов, заложенных под обеспечение. Нативный токен криптовалютного проекта Cream Finance (CREAM) готов обесценится до нуля. По крайней мере к такому выводу пришел анонимный блокчейн-аналитик Meeseeking.

2020-10-10 18:01


Cream Finance Announces AMM, creamY, with Several Innovations that ‘Make it Stand Out’

Cream Finance has introduced an automated market maker (AMM) which focuses on low slippage and fees of stablecoins. Combining Curve’s very low cost and very high-efficiency feature and Balancer’s updatable for addition or removal of an asset from the pool — unlike Uniswap or Curve pool, which are immutable — creamY has created a “dynamically […] The post Cream Finance Announces AMM, creamY, with Several Innovations that 'Make it Stand Out' first appeared on BitcoinExchangeGuide.

2020-9-22 22:07