Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Cream Finance Flash Loan Attack: $130.00M Reported Loss

·Historical incident record

Incident Overview

Cream Finance, the DeFi lending agreement, was attacked and lost approximately US$130 million. The stolen funds were mainly Cream LP tokens and other ERC-20 tokens. It is reported that this is the third largest DeFi hacking in history (although the two larger hacking incidents have funds returned), in addition, Cream Finance has suffered multiple lightning loan attacks before, and lost 37.5 million US dollars in February. Another $19 million was lost.

Sources & References

Original incident referencehttps://medium.com/cream-finance/post-mortem-exploit-oct-27-507b12bb6f8e (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodFlash loan attack
    Reported loss$ 2,300,000
  2. Incident date
    Target

    AnubisDAO

    Attack methodRug Pull
    Reported loss13,556 ETH
  3. Incident date
    Attack methodSandwich attack
    Reported loss40.93 ETH
  4. Incident date
    Attack methodFlash loan attack
    Reported loss$ 2,000,000
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 12,000,000