Defi Platform Cream Finance Hacked, $29 Million Lost

Cream

Cream finance, a defi borrowing and lending protocol, has been the victim of a hack that erased more than $29 million from its vaults. The attacker took advantage of a loophole in the implementation for adding the amp token to the protocol. This is the second time the platform has been involved in a hack. The first breach happened in February, when Cream lost $37.5 million.

Cream Protocol Suffers Hack

Cream protocol, a defi lending-borrowing platform present on four different chains (Ethereum, BSC, Polygon, and Fantom), suffered a hack Monday that resulted in the loss of $29 million in several cryptocurrencies. The attacker took advantage of a bug caused by the introduction of the amp token into the protocol. According to Peckshield, a blockchain security and data analytics company, the hack was perpetrated in just one transaction, taking advantage of a reentrancy bug present in the code of the amp currency.

This allowed the hacker to re-borrow assets during the transfer before updating the first borrow. The exploit was repeated 17 times and allowed the hacker to get ahold of 418,311,571 amp (worth $25.1 million) and 1,308.09 ethereum (worth $4.15 million). The platform had been audited by Trails Of Bits, a cybersecurity research and consulting firm, prior to the inclusion of the amp token.

Cream declared it stopped the exploit by pausing supply and borrow on amp. The protocol also informed users that no other markets were affected, and that it was expecting to offer a post mortem report at a later date.

Not the First Time

This is not the first time Cream has suffered a hacking incident. Less than six months ago, the platform was also affected by a hack that allowed the attacker to withdraw $37.5 million. The hack, using an unreleased version of a contract of Alpha Finance, another defi protocol, exploited a rounding miscalculation in the code and a whitelisting function. After taking control of the funds, the attacker took them to Tornado.cash, a protocol that allows private transactions in Ethereum.

Luckily, no user funds were affected during this first hack. However, it shows that the defi environment is very complex and that even a small change in protocol (like adding a currency or whitelisting another platform) can have a big impact on security in the future.

What do you think about defi-related hacks? Tell us in the comments section below.



from Bitcoin News https://ift.tt/3jv6eYP

Comments

Post a Comment

Popular posts from this blog

L2 Crypto Project Blast Achieves $660M TVL Amid Mockery for Key Developer Recruitment

Image
Recent data reveals that Blast, the new layer two (L2) blockchain platform, has amassed a significant $660 million in value within its decentralized finance (defi) protocol. Concurrently, while accumulating a variety of crypto assets, the initiative has commenced a search for experienced senior blockchain developers. While Amassing $660M, L2 Blast Project Searches for Developers In recent times, Blast has emerged as a focal point of interest. This project, conceptualized by Pacman , the mind behind the non-fungible token (NFT) marketplace Blur, has rapidly gained traction. Within a span of less than a week, the platform’s total value locked (TVL) soared to approximately $400 million. Concurrently, Blast faced allegations of resembling a Ponzi scheme. During this period, Paradigm, a principal investor in the project, admitted that the team had overstepped in certain aspects of communication and implementation. Pacman has also countered the Ponzi scheme allegations and further cl
Read more

Harsh Laws Make Bitcoin Holders Consider Renunciation or Dual Citizenship

Image
As digital currencies become a mainstay in society, a great number of governments have enforced strict tax guidelines, severe money transmission rules, and tough regulations. Because of a few nation-states’ harsh rules against cryptos, there are individuals who plan to renounce their citizenship in order to become stateless. Some people will also attempt to get double-citizenship, as both of these acts may help sovereign individuals avoid government intrusion and theft. Also Read: As FATF Regulations Galvanize, Crypto Mixing Applications Are Targeted A Cryptocurrency Advocate’s Quest for Financial Sovereignty May Involve Hard Choices It’s been close to 11 years since the inception of Bitcoin and during the last few years government agencies and law enforcement have been cracking down on digital currency holders. In certain areas around the world, a few countries have extremely difficult crypto laws and stringent capital gains taxes. Countries like the U.S. have imposed strict regul
Read more

2021 Bitcoin Price Predictions: Analysts Forecast BTC Values Will Range Between Zero to $600K

Image
As bitcoin has touched new price highs on Thursday nearing the $50k handle, people have been curious as to where the price will go in the future. Meanwhile, despite the gains so far, a number of luminaries, analysts, executives, and proponents from the crypto space believe the leading crypto asset will reach between $60k to six-digits this year. Mike Novogratz Predicts $100K Bitcoin: ‘Other CFOs and CEOs Are Saying, What Should We Be Doing?’ Satoshi Nakamoto’s invention has gained mass appeal in recent times as the leading digital asset bitcoin ( BTC ) has reached its highest value ever in 2021. On Thursday morning (EST), BTC spiked to an all-time high (ATH) at $48,697 per unit. Earlier in the morning at around 2 a.m., bitcoin was exchanging hands for $44,485 and saw an 8.98% increase since then. At the time of publication, at 6:30 p.m. (EST) on February 11, 2021, bitcoin (BTC) is swapping for $47,821 per coin. With BTC so close to the $50k mark, people have been forecasting
Read more