Cream Finance

Cream Finance Hack: $130 Million Stolen in Exploit

October 27, 2021
Attack Types: 
Smart Contract Exploit ,Flash Loan Attack ,Price Oracle Manipulation
Entity Types: 
DeFi ,Lending Platform
Target Entities: 
Cream Finance

Summary # On October 27, 2021, Cream Finance, a decentralized finance (DeFi) platform, fell victim to a sophisticated attack resulting in the theft of $130 million worth of cryptocurrency. The attacker exploited vulnerabilities in Cream Finance’s lending pool contract and manipulated the price oracle, allowing them to carry out a series of orchestrated transactions that ultimately drained the protocol of its liquidity. Attackers # The attackers remain unidentified. 0x24354d31bc9d90f62fe5f2454709c32049cf866b Losses # $130M USD ...