Skip to main content

Defi Platform Cream Finance Hacked, $29 Million Lost

Cream

Cream finance, a defi borrowing and lending protocol, has been the victim of a hack that erased more than $29 million from its vaults. The attacker took advantage of a loophole in the implementation for adding the amp token to the protocol. This is the second time the platform has been involved in a hack. The first breach happened in February, when Cream lost $37.5 million.

Cream Protocol Suffers Hack

Cream protocol, a defi lending-borrowing platform present on four different chains (Ethereum, BSC, Polygon, and Fantom), suffered a hack Monday that resulted in the loss of $29 million in several cryptocurrencies. The attacker took advantage of a bug caused by the introduction of the amp token into the protocol. According to Peckshield, a blockchain security and data analytics company, the hack was perpetrated in just one transaction, taking advantage of a reentrancy bug present in the code of the amp currency.

This allowed the hacker to re-borrow assets during the transfer before updating the first borrow. The exploit was repeated 17 times and allowed the hacker to get ahold of 418,311,571 amp (worth $25.1 million) and 1,308.09 ethereum (worth $4.15 million). The platform had been audited by Trails Of Bits, a cybersecurity research and consulting firm, prior to the inclusion of the amp token.

Cream declared it stopped the exploit by pausing supply and borrow on amp. The protocol also informed users that no other markets were affected, and that it was expecting to offer a post mortem report at a later date.

Not the First Time

This is not the first time Cream has suffered a hacking incident. Less than six months ago, the platform was also affected by a hack that allowed the attacker to withdraw $37.5 million. The hack, using an unreleased version of a contract of Alpha Finance, another defi protocol, exploited a rounding miscalculation in the code and a whitelisting function. After taking control of the funds, the attacker took them to Tornado.cash, a protocol that allows private transactions in Ethereum.

Luckily, no user funds were affected during this first hack. However, it shows that the defi environment is very complex and that even a small change in protocol (like adding a currency or whitelisting another platform) can have a big impact on security in the future.

What do you think about defi-related hacks? Tell us in the comments section below.



from Bitcoin News https://ift.tt/3jv6eYP
Labels:

Comments

Post a Comment

Popular posts from this blog

Mt Gox Creditors Updated, Trustee Says Rehabilitation Custodian Is ‘Currently Preparing to Make Repayments’

On August 31, 2022, the Mt Gox trustee Nobuaki Kobayashi explained in a recent letter that the rehabilitation custodian is “currently preparing to make repayments” to Mt Gox creditors. Trustee Updates Mt Gox Creditors — Repayment Date and Exchange Still Unknown Last week speculation and rumors concerning the release of 140K bitcoin ( BTC ) from Mt Gox littered social media platforms and headlines. Bitcoin.com News covered the situation six days ago as a number of people and Mt Gox creditors called the rumors “ fake news .” During that same period of time, a bitcoin whale transferred 10,000 BTC to unknown wallets, and a 2018 annotation , heuristics, and clustering methods show the funds likely originated from the June 2011 Mt Gox hacks. Following the mysterious whale transfer, last Wednesday, Mt Gox published an official update from the court trustee Nobuaki Kobayashi that explains the court is “currently preparing to make repayments” to creditors. Mt Gox creditors have been wait...
Post a Comment
Read more

Fidelity Discusses Bitcoin as Portfolio Insurance — Could Soon Stand in ‘Stark Contrast’ to Path Fiat Currencies Take

Fidelity Digital Assets, a subsidiary of Fidelity Investments, says that bitcoin could be considered portfolio insurance. The firm notes that the cryptocurrency “may soon stand in stark contrast to the path that the rest of the world and fiat currencies may take — namely the path of increased supply, additional currency creation, and central bank balance sheet expansion.” Fidelity Says Bitcoin Could Be Portfolio Insurance Fidelity Digital Assets, a subsidiary of Fidelity Investments, recently published a research study titled “The Rising Dollar and Bitcoin.” The research outlines “how bitcoin could be considered portfolio insurance” as the rising dollar impacts global currency markets. “The strengthening U.S. dollar is wreaking havoc among other countries and may put pressure on the Federal Reserve to soon reverse its tightening monetary actions, something that has precedent based on 1985’s Plaza Accord,” Fidelity explained. In addition, “more monetary debasement may be needed to ...
Post a Comment
Read more

Economists Discuss Russia, China Potentially Developing Gold-Backed Currency That Could Undermine US Dollar

Economists have weighed in on reports that China and Russia may be developing a new gold-backed currency that could undermine the U.S. dollar’s status as the world’s primary reserve currency. Russia and China May Be Developing Gold-Backed Currency Several experts have shared their views on Russia and China potentially creating a new gold-baked currency, Fox Business reported Saturday, emphasizing that China has been buying up huge quantities of gold while Russia was forced off the U.S. dollar due to sanctions imposed on the country following its invasion of Ukraine. The news outlet noted that some experts have cautioned that these moves, along with the closer relationship that has developed between Moscow and Beijing, point to the likelihood of China attempting to launch a gold-backed currency. However, neither Russia nor China has officially confirmed plans for such a currency. Craig Singleton, senior fellow at the Foundation for Defense of Democracies and a former U.S. diplomat,...
Post a Comment
Read more