{"id":51168,"date":"2021-09-02T19:27:37","date_gmt":"2021-09-02T19:27:37","guid":{"rendered":"https:\/\/timestampmag.com\/?p=51168"},"modified":"2021-09-02T19:27:37","modified_gmt":"2021-09-02T19:27:37","slug":"cream-finance-loses-19m-in-flash-loan-attack","status":"publish","type":"post","link":"https:\/\/timestampmag.com\/2021\/09\/02\/cream-finance-loses-19m-in-flash-loan-attack\/","title":{"rendered":"Cream Finance Loses $19M in Flash Loan Attack"},"content":{"rendered":"<ul>\n<li>Cream Finance lost more than $19m in cryptocurrency to an unidentified hacker.<\/li>\n<li>The hacked DeFi protocol stopped the exploit by pausing supply and borrowing of contracts on the AMP token.<\/li>\n<li>After the attack, both the AMP token and Cream Finance\u2019s native token, CREAM, witnessed a significant fall in prices.<\/li>\n<\/ul>\n<p>In a recent cyber theft, it is estimated that hackers may have stolen more than $19 million in cryptocurrency assets from Cream Finance, a decentralized finance platform that enables users to loan and speculate <a href=\"https:\/\/timestampmag.com\/2020\/03\/01\/whats-the-crypto-in-cryptocurrency\/\" target=\"_blank\" rel=\"noopener\">cryptocurrency<\/a> price variations.<\/p>\n<p>According to <a href=\"https:\/\/twitter.com\/CreamdotFinance\/status\/1432249771750686721\" target=\"_blank\" rel=\"noopener\">Cream Finance<\/a>, the hacker used a \u201creentrancy attack\u201d in its \u201cflash loan\u201d feature resulting in a loss of 418,311,571 in AMP tokens and 1,308.09 in ETH coins. The hacker took advantage of a bug caused by the introduction of the amp token into the protocol.<\/p>\n<p>Following the attack, Cream Finance announced that it stopped the exploit by pausing supply and borrowing on the AMP. They also informed users that no other markets were affected.<\/p>\n<p>Additionally, members of Cream Finance confirmed the authenticity of the hacking incident. After reporting on its official channel \u2013 Discord, the members started working with PeckShield.<\/p>\n<p>Reacting to the hack, <a href=\"https:\/\/twitter.com\/peckshield\/status\/1432250118904889344?s=20\" target=\"_blank\" rel=\"noopener\">PeckShield<\/a> tweeted saying that the hacker made a 500 ETH Flash Loan and deposited the funds as collateral, then borrowed 19m AMP and exploited a reentrancy bug to re-borrow 355 ETH inside the Amp token transfer function, and finally self-liquidate the borrowed amount.<\/p>\n<p>The hacker repeated the same process 17 times and was able to gain the tokens, worth about $19 million.<\/p>\n<h2>Cream Finance Suffers Second Hack in 2021<\/h2>\n<p>This is not the first time that Cream Finance has suffered a hack. Earlier this year, the DeFi platform was affected by a hack that allowed the hacker to <a href=\"https:\/\/coingape.com\/cream-finance-gets-exploited-for-37-5-million\/\" target=\"_blank\" rel=\"noopener\">steal $37.5 million<\/a>. As per the reports, this hack\u2019s root cause was the exploitation of Alpha Finance.<\/p>\n<figure id=\"attachment_51170\" aria-describedby=\"caption-attachment-51170\" style=\"width: 2000px\" class=\"wp-caption alignleft\"><img fetchpriority=\"high\" decoding=\"async\" class=\"size-full wp-image-51170\" src=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1.jpg\" alt=\"\" width=\"2000\" height=\"1284\" srcset=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1.jpg 2000w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1-300x193.jpg 300w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1-1024x657.jpg 1024w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1-768x493.jpg 768w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/09\/hack1-1536x986.jpg 1536w\" sizes=\"(max-width: 2000px) 100vw, 2000px\" \/><figcaption id=\"caption-attachment-51170\" class=\"wp-caption-text\">Source: <a href=\"https:\/\/www.fool.com\/investing\/2018\/05\/09\/the-biggest-cryptocurrency-hacks-in-history.aspx\" target=\"_blank\" rel=\"noopener\">fool.com<\/a><\/figcaption><\/figure>\n<p>Apart from Cream Finance, similar incidents took place on Bilaxy crypto exchange that compromised about <a href=\"https:\/\/www.pymnts.com\/cryptocurrency\/2021\/crypto-exchange-bilaxy-loses-21m-in-hack\/#:~:text=Hong%20Kong%20cryptocurrency%20exchange%20Bilaxy,to%20the%20Investing.com%20report.\" target=\"_blank\" rel=\"noopener\">295 ERC-20 tokens<\/a>. While a hack on Liquid amounted to a loss of about $100 million.<\/p>\n<p>As such, flash loans have remained one of the most controversial features of the decentralized finance ecosystem. It is mainly because there is no collateral required for the loans, and hence, they are more vulnerable to attacks.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cream Finance lost more than $19m in cryptocurrency to an unidentified hacker. The hacked DeFi protocol stopped the exploit by pausing supply and borrowing of contracts on the AMP token. After the attack, both the AMP token and Cream Finance\u2019s native token, CREAM, witnessed a significant fall in prices. In a recent cyber theft, it [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":51169,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[698,697,699,695,370,4,152,103,104,31,690,696],"_links":{"self":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51168"}],"collection":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/comments?post=51168"}],"version-history":[{"count":3,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51168\/revisions"}],"predecessor-version":[{"id":51173,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51168\/revisions\/51173"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/media\/51169"}],"wp:attachment":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/media?parent=51168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/categories?post=51168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/tags?post=51168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}