According to the decentralized finance (defi) protocol Crema Finance, the application was hacked on July 2, 2022. A Twitter account called “Solanafm” says the defi protocol lost around $8.7 million from the attack.
Crema Finance Vulnerability Causes Defi App to Lose Millions — 6 Flashloans Executed
Another defi protocol has lost funds to a hacker as the Solana liquidity application disclosed it was attacked on Saturday, July 2, 2022.
“Attention,” Crema Finance សរសេរ on Saturday. “Our protocol seems to have just experienced a hacking. We temporarily suspended the program and are investigating it. Updates will be shared here ASAP.”
Crema Finance is a concentrated liquidity market maker (CLMM) algorithm built on top of Solana and the Twitter account @solanafm explained the defi app suffered an exploit. “On 2nd July, a vulnerability in the ticks account caused an exploit on Crema Finance for a total amount of $8,782,446,” Solanafm tweeted.
“We worked closely with the Crema team alongside [Ottersec] to break down the movement of the stolen funds following the exploit,” Solanafm added. Ottersec is a blockchain auditing firm that has សវនកម្ម various blockchain smart contracts and infrastructure.
Solanafm says that the hacker siphoned the funds via “6 flash loans on” the ពិធីសារលក់. The attacker also leveraged the Wormhole Exchange to gather the stolen funds.
“Currently, all of the stolen funds are held in the hacker’s សាកលវិទ្យាល័យ ETH wallet and [the] initial SOL wallet,” Solanafm’s Twitter thread concluded.
Ottersec also បានបោះពុម្ពផ្សាយ on the Crema Finance exploit and the flash loans. “In order to utilize flashloans, the attacker had to deploy their own onchain program,” Ottersec said. “Unfortunately, this program was quickly closed after the exploit.”
“The flashloan calls three key instructions on the Crema contract: ‘DepositFixTokenType,’ ‘Claim,’ and ‘WithdrawAllTokenTypes.’ The attacker is [then] able to deposit and then withdraw the same amount of tokens, while receiving additional tokens from the claim instruction,” Ottersec added.
What do you think about Crema Finance getting hacked for $8.7 million in crypto funds? Let us know what you think about this subject in the comments section below.
សេវាឥណទានរូបភាព: Shutterstock, Pixabay, វិគីភីឌា
ការមិនទទួលខុសត្រូវ៖ អត្ថបទនេះគឺសម្រាប់គោលបំណងព័ត៌មានប៉ុណ្ណោះ។ វាមិនមែនជាការផ្តល់ជូនដោយផ្ទាល់ឬការស្នើសុំពីការទិញឬលក់ឬការផ្តល់អនុសាសន៍ឬការយល់ព្រមលើផលិតផលសេវាកម្មឬក្រុមហ៊ុនណាមួយឡើយ។ Bitcoin.com មិនផ្តល់ដំបូន្មានការវិនិយោគពន្ធច្បាប់ឬគណនេយ្យ។ ទាំងក្រុមហ៊ុនឬអ្នកនិពន្ធមិនទទួលខុសត្រូវដោយផ្ទាល់ឬដោយប្រយោលចំពោះការខូចខាតឬការបាត់បង់ណាមួយដែលបណ្តាលមកពីការចោទប្រកាន់ឬបណ្តាលមកពីការប្រើប្រាស់ឬពឹងផ្អែកលើការប្រើប្រាស់ទំនិញឬសេវាកម្មណាមួយដែលបានលើកឡើងនៅក្នុងអត្ថបទនេះ។
Source: https://news.bitcoin.com/exploit-forces-crema-finance-to-temporarily-suspend-services-8-7-million-stolen/