Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Crema Finance Flash Loan Attack: $1.68M Reported Loss

·Historical incident record

Incident Overview

The centralized liquidity DeFi application Crema Finance on the Solana chain announced its shutdown due to a hacker attack. The official Twitter of the protocol quoted information from the on-chain browser SolanaFM, saying that the value of the lost encrypted assets was $8.782 million. Early this morning, Crema Finance disclosed the attacked thread, saying that hackers bypassed contract checks by creating a fake price change data account (Tickaccount), and then used fake price data and flash loans to steal huge fees from the fund pool. On July 7, Crema Finance said on Twitter that after a long negotiation, Crema Finance attackers agreed to collect 45,455 SOL (about $1.682 million) as a white hat bounty, and had returned 6,064 Ethereum and 23,967.9 SOL (approximately $8.1 million).

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Quixotic

    Attack methodContract Vulnerability
    Reported loss220,000 OP
  2. Incident date
    Target

    BiFi

    Attack methodPrivate Key Leakage
    Reported loss1,852 ETH
  3. Incident date
    Target

    XCarnival

    Attack methodContract Vulnerability
    Reported loss1,620 ETH
  4. Incident date
    Attack methodScam
    Reported loss224 BNB
  5. Incident date
    Attack methodAccount Compromise
    Reported lossNot disclosed