Exploit Forces Crema Finance to Temporarily Suspend Services, $8.7 Million Stolen

According to the decentralized finance (defi) protocol Crema Finance, the utility became hacked on July 2, 2022. A Twitter account known as “Solanafm” says the defi protocol misplaced around $eight.7 million from the attack.

Crema Finance Vulnerability Causes Defi App to Lose Millions  6 Flashloans Executed

Another defi protocol has lost budget to a hacker as the Solana liquidity application disclosed it become attacked on Saturday, July 2, 2022.

“Attention,” Crema Finance wrote on Saturday. “Our protocol appears to have simply experienced a hacking. We temporarily suspended the program and are investigating it. Updates could be shared right here ASAP.”

Crema Finance is a concentrated liquidity market maker (CLMM) set of rules built on top of Solana and the Twitter account @solanafm explained the defi app suffered an exploit. “On second July, a vulnerability inside the ticks account induced an take advantage of on Crema Finance for a total quantity of $eight,782,446,” Solanafm tweeted.

“We labored intently with the Crema group alongside [Ottersec] to break down the motion of the stolen funds following the exploit,” Solanafm introduced. Ottersec is a blockchain auditing firm that has audited numerous blockchain smart contracts and infrastructure.

Solanafm says that the hacker siphoned the funds via “6 flash loans on” the Solend Protocol. The attacker additionally leveraged the Wormhole Exchange to acquire the stolen price range.

“Currently, all of the stolen price range are held inside the hacker’s ETH wallet and  initial SOL wallet,” Solanafm’s Twitter thread concluded.

Ottersec additionally published a thread on the Crema Finance take advantage of and the flash loans. “In order to make use of flashloans, the attacker needed to install their personal onchain application,” Ottersec said. “Unfortunately, this application became fast closed after the make the most.”

“The flashloan calls three key commands on the Crema agreement: ‘DepositFixTokenType,’ ‘Claim,’ and ‘WithdrawAllTokenTypes.’ The attacker is [then] able to deposit after which withdraw the equal quantity of tokens, while receiving extra tokens from the claim guidance,” Ottersec introduced.

Share this post