Digital Asset
Intelligence
Security Incident

Alpha Finance/Cream Finance Flash Loan Attack: $37.50M Reported Loss

·Historical incident record

Incident Overview

The attacker uses Lightning Loan to Alpha Finance for leveraged lending, and uses Alpha Finance’s own Cream IronBank quota to return the Lightning Loan. In this process, the attacker obtains a large amount of cySUSD by adding liquidity to Cream, allowing the attacker to use it. These cySUSD are further borrowed in Cream Finance. Due to problems with Alpha Finance, both agreements suffered losses at the same time.

Sources & References

Original incident referencehttps://medium.com/cream-finance/alpha-homora-v2-exploit-post-mortem-344d277bdea6 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Verge

    Attack method51% attack
    Reported lossNot disclosed
  2. Incident date
    Attack methodFlash loan attack
    Reported loss$ 1,500,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed