Cream Finance to repay stolen Ether and Amp via protocol fees

Published at: Sept. 1, 2021

Decentralized finance (DeFi) protocol Cream Finance will pay back its users following a $18.8 million flash loan hack that occurred on Aug. 30.

Cream has published a post-mortem to the AMP flash loan exploit, promising to replace the stolen Ether (ETH) and Amp (AMP) tokens by allocating 20% of all protocol fees until the debt is paid entirely. Cream will also post collateral with relevant parties at AMP and its creators, Flexa digital payments network, to secure the debt.

According to the post-mortem report, the latest flash loan exploit was the first time Cream Finance has suffered a direct exploit, losing 462 million AMP tokens and 2,800 ETH. With assistance from blockchain security firm PeckShield, Cream found that the exploit was caused by an error in the way the protocol integrated AMP. “While unfortunate and disappointing, we take ownership of the error,” Cream noted.

Alongside a main exploit, Cream has also discovered a smaller copy-cat attack from an address with transaction history on Binance crypto exchange. The crypto trading platform is now cooperating with Cream to identify the second perpetrator.

Cream said that it will be working with authorities to trace the attacker and work with law enforcement authorities to prosecute “to the fullest extent of the law.” The hacked protocol will also grant a 10% bug bounty to the exploiter if they decide to send back the stolen funds. “If anyone is able to identify and provide information leading to the arrest and prosecution of the exploiter, we will share 50% of all funds returned,” Cream added.

Related: Poly Network offers to on board 'Mr. White Hat' as chief security advisor

As previously reported, Cream halted supply and borrow contracts on AMP on Aug. 30 to stop the exploit that allowed the attacker to gain access to nearly $19 million in AMP and ETH through reborrowing assets in just 17 separate transactions. Prices of both Cream’s native token, CREAM, and AMP subsequently dropped, with AMP plummeting nearly 13%.

The affected tokens continued declining in price following the attack. At the time of writing, CREAM is trading at $159, down 11% over the past seven days, according to CoinGecko. AMP token is down nearly 15% over the same period, trading at $0.052525.

Tags
Related Posts
Jump Crypto replenishes funds from $320M Wormhole hack in largest-ever DeFi 'bailout'
On Thursday, Jump Crypto, a crypto venture capital firm that owns Certus One, the developer of the Wormhole token bridge, announced it had deposited 120 thousand Ether (ETH) into a Solana-Ethereum bridge that suffered a devastating exploit. The day prior, hackers fraudulently minted 120 thousand wrapped Ether (wETH) worth $321 million on the Solana (SOL) platform, then redeemed 93,750 wETH for ETH on the Ethereum network while swapping the rest for other altcoins on the Solana network. The cross-chain ETH-wETH is supposed to have an exchange ratio of 1:1 against one another. Therefore, unauthorized minting of wETH leads to significant …
Technology / Feb. 3, 2022
​​Cream Finance DeFi platform loses $19M in a flash loan hack
Cream Finance, a major decentralized finance (DeFi) protocol focused on lending, has suffered a severe exploit, with a hacker stealing nearly $19 million from its platform. An unknown hacker has managed to gain $18.8 million in the latest flash loan exploit of the Cream Finance protocol through a reentrancy bug introduced by the Amp token, according to an investigation by blockchain security firm PeckShield. Announcing the news Monday, Cream Finance said that the protocol has stopped the exploit by pausing supply and borrow contracts on the Amp token. “No other markets were affected,” Cream Finance stated. C.R.E.A.M. v1 market on …
Decentralization / Aug. 30, 2021
‘DeFi done right’: Layer-one protocol launches mainnet
A decentralized finance protocol has launched its mainnet — describing it as a crucial step on the journey to a frictionless financial future. Radix, which describes itself as a platform for smart money, is also launching Instapass with its Olympia mainnet — an optional user and developer service that delivers the world’s first single sign-on solution for building compliant DeFi. The Radix mainnet is being positioned as a generational improvement in the history of decentralized ledger computing — and one that delivers 100 times more executional efficiency than the Ethereum Virtual Machine. This comes hot on the heels of the …
Decentralization / July 29, 2021
Ether already ‘flippening’ Bitcoin, says Celsius CEO
Bitcoin (BTC), the largest cryptocurrency by market capitalization, has already started losing its market dominance to Ether (ETH), according to Celsius Network CEO Alex Mashinsky. In a Monday interview with Kitco News, Mashinsky argued that the Ether “flippening,” or the hypothetical scenario in which Ether overtakes Bitcoin as the world’s most valued cryptocurrency, is already happening right now. Mashinsky said that the flippening has already happened on Celsius. “We manage about $17 billion in deposits, or in customer coins, and the number one coin held in dollar terms is Ethereum,” he said. Mashinsky also predicted that Ether will have completely …
Decentralization / July 6, 2021
What are the top metaverse projects besides The Sandbox and Decentraland? | Watch The Market Report live
This week on “The Market Report,” we jump right into our main event. Join Cointelegraph analysts Benton Yaun, Jordan Finneseth, Sam Bourgi and Ornella Hernández as they debate each other on the top metaverse projects on the market. First up, we’ve got Bourgi’s pick of Wilder World, which allows you to interact with its immersive 3D world via nonfungible tokens (NFTs) and is also based on the massively popular Unreal Engine 5. Following Bourgi, we have The Market Report first-timer Hernández, who has decided to go with Boson Portal, which aims to revolutionize metaverse commerce. Will its high-profile partners such …
Decentralization / Feb. 15, 2022