Hacker stole over $ 18 million from Cream Finance platform

Brother

Professional
Messages
2,590
Reaction score
544
Points
113
The DeFi Cream Finance project has fallen victim to a quick loan attack.

2b294ba3a8c663c978b808db76ec2c78.png


The Cream Finance service reported that it was subjected to a hacker attack, as a result of which the criminal stole 418 million Flexa Network (AMP) tokens and 1,308 ETH for a total of over $ 18 million. The developers said that they managed to prevent more serious losses, as they promptly took action ...

PeckShield analysts explained that the hacker managed to get a quick loan of 500 ETH. He used it to uncover the capabilities of a "re-entry error" vulnerability found in the Ampleforth smart contract. In total, 17 transactions were carried out, as a result of each of which the attacker received additional tokens.

Representatives of the DeFi protocol have not yet commented on the incident.

In February, Cream Finance was already undergoing a similar attack. Then the hacker took advantage of a vulnerability in the Iron Bank protocol (the second version of the Cream Finance project) and withdrew tokens totaling $ 37.5 million.
 
Top