Cream finance, a defi borrowing and lending protocol, has been the victim of a hack that erased more than $29 million from its vaults. The attacker took advantage of a loophole in the implementation for adding the amp token to the protocol. This is the second time the platform has been involved in a hack. The first breach happened in February, when Cream lost $37.5 million.

Cream Protocol Suffers Hack

Cream protocol, a defi lending-borrowing platform present on four different chains (Ethereum, BSC, Polygon, and Fantom), suffered a hack Monday that resulted in the loss of $29 million in several cryptocurrencies. The attacker took advantage of a bug caused by the introduction of the amp token into the protocol. According to Peckshield, a blockchain security and data analytics company, the hack was perpetrated in just one transaction, taking advantage of a reentrancy bug present in the code of the amp currency.

This allowed the hacker to re-borrow assets during the transfer before updating the first borrow. The exploit was repeated 17 times and allowed the hacker to get ahold of 418,311,571 amp (worth $25.1 million) and 1,308.09 ethereum (worth $4.15 million). The platform had been audited by Trails Of Bits, a cybersecurity research and consulting firm, prior to the inclusion of the amp token.

Cream declared it stopped the exploit by pausing supply and borrow on amp. The protocol also informed users that no other markets were affected, and that it was expecting to offer a post mortem report at a later date.

Not the First Time

This is not the first time Cream has suffered a hacking incident. Less than six months ago, the platform was also affected by a hack that allowed the attacker to withdraw $37.5 million. The hack, using an unreleased version of a contract of Alpha Finance, another defi protocol, exploited a rounding miscalculation in the code and a whitelisting function. After taking control of the funds, the attacker took them to Tornado.cash, a protocol that allows private transactions in Ethereum.

Luckily, no user funds were affected during this first hack. However, it shows that the defi environment is very complex and that even a small change in protocol (like adding a currency or whitelisting another platform) can have a big impact on security in the future.

What do you think about defi-related hacks? Tell us in the comments section below.

Bitcoin News
News, bug, cream finance, DeFi, Exploit, Hack, Peckshield, Trails Of Bits

1% deposit bonus on crypto in buyucoin

1% Deposit Bonus & Withdrawal Fees On Crypto Deposit in BuyUcoin

BuyUcoin giving 1% deposit bonus on crypto and reimbursement of crypto withdrawal fees for Indian user who have funds on banned crypto exchange. In the wake of the recent ban ...
Read More
Bitcoin ETFs

A Decade in the Making: US SEC Approves 11 Bitcoin ETFs, Igniting Market Enthusiasm

After years of anticipation and regulatory scrutiny, the U.S. Securities and Exchange Commission (SEC) has granted approval to 11 Bitcoin ETFs applications, marking a significant milestone in the cryptocurrency and ...
Read More
Will Bitcoin Price Increase 200% When Bitcoin ETF Is Approved?

Will Bitcoin Price Increase 200% When Bitcoin ETF Is Approved?

Everyone wants to know that bitcoin will Bitcoin Price Increase 200% When Bitcoin ETF Is Approved? We talk about the Bitcoin ETF, an important part in the cryptocurrency space. According ...
Read More

10 Must-Have Features on Bitcoin Staking Site

Crypto has provided many benefits for online gambling, and almost all relevant gambling sites now offer it as a payment method.  With so many gambling sites, players, especially those without ...
Read More
Christmas in the cryptocurrency world arrives early as the pre-holiday crypto market heats up

Christmas in the cryptocurrency world arrives early as the pre-holiday crypto market heats up

Happy Cryptomas to all of you! During the bullish state of the crypto market, margin-lending platforms and decentralised exchanges were the most often used DeFi protocols. Bitcoin is Up 167% so ...
Read More
Share with Others