Cream Finance Loses $25M in Flash Loan Attack

Share Article
In Brief
  • Decentralized finance (DeFi) lending platform CREAM Finance lost $25 million in a flash loan attack, the second in the past six months.

  • CREAM confirmed the exploitation, resulting in a loss of 418,311,571 in AMP and 1,308.09 in ETH.

  • Cream Finance launched on the Polygon blockchain in June.

  • promo

    Claim a $200 reward with 3 simple steps — only on Bybit!

The Trust Project is an international consortium of news organizations building standards of transparency.

Decentralized finance (DeFi) lending platform CREAM Finance lost $25 million in a flash loan attack, the second in the past six months.

Sponsored





Sponsored

Blockchain security company PeckShield Inc. first broke the news on Twitter, citing data from Etherscan. Shortly thereafter, Cream confirmed the exploit that resulted in a loss of 418,311,571 in AMP and 1,308.09 in ETH. Combined, this amounts to roughly $25 million at today’s exchange rates. While AMP seems to have suffered, falling 15% since the news broke, Ethereum remains relatively unaffected at around $3,200.

The platform also reportedly ceased the exploitation by pausing supply and borrowing on AMP. According to the initial investigation, with the help of PeckSheild, the exploit occurred through reentrancy on the AMP token contract.

Sponsored



Sponsored

Second attack in six months

The latest attack must be particularly frustrating for the DeFi lending platform, coming within just six months of another attack. In February, Cream experienced a similar flash loan attack losing roughly $37.5 million worth of cryptocurrency. Specifically, it lost 13,200 wETH, 3.6 million USDC, 5.6 million USDT, and 4.2 million DAI

The funds had been exploited through Alpha Hamora, an Ethereum protocol for leveraging your position in yield farming pools. Alpha Labs then proceeded to work with YFI founder Andre Cronje and Cream Finance to investigate the stolen funds. At the time, a prime suspect had been identified.

CREAM developments

Despite experiencing flash loan attacks, Cream has been developing steadily. In April, Cream introduced collateral-free protocol-to-protocol flash loans with Iron Bank. They were also significantly cheaper, with interest at 0.03% compared to 0.09% on AAVE and 0.3% on Uniswap. It also automated the entire process through smart contracts to prevent lenders from defaulting.

At the time, Iron Bank had recorded $435 million in total value locked (TVL). Additionally, Cream Finance launched on the Polygon blockchain in June to facilitate faster transactions, lower gas fees, and access to different markets for its users.

Disclaimer

All the information contained on our website is published in good faith and for general information purposes only. Any action the reader takes upon the information found on our website is strictly at their own risk.
Sponsored
Share Article

Nick is a data scientist who teaches economics and communication in Budapest, Hungary, where he received a BA in Political Science and Economics and an MSc in Business Analytics from CEU. He has been writing about cryptocurrency and blockchain technology since 2018, and is intrigued by its potential economic and political usage. He can best be described as an optimistic center-left skeptic.

Follow Author

$200 reward waiting for you — Deposit, Trade, Follow and Claim today!

Discover

Limited offer! Learn to mine and trade crypto today for free

Go