DeFi Protocols Cream Finance, Alpha Exploited in Flash Loan Attack; $37.5M Lost

Alpha Finance says the "loophole" has been patched.

AccessTimeIconFeb 13, 2021 at 1:52 p.m. UTC
Updated Sep 14, 2021 at 12:11 p.m. UTC

Decentralized finance protocols (DeFi) Cream Finance and Alpha Finance were victims of one of the largest flash loan attacks ever Saturday morning, resulting in a loss of funds totaling $37.5 million, according to transaction details on Etherscan.

Two hours later Cream Finance said its contracts were “functioning as normal” and markets had been enabled.

Alpha Finance then posted its own announcement, saying its Alpha Homora V2 product was the root cause. The company confirmed that it is working with DeFi guru Andre Cronje and Cream Finance to investigate the incident, and that the loophole had been fixed. It also said that they “have a prime suspect” in mind.

Earlier, Cream Finance tweeted an update on the incident saying that asset borrowing from its recently launched Iron Bank lending feature had been suspended. That tweet has since been deleted.

This is the second attack on a DeFi protocol in the last two weeks. Cronje's Yearn Finance suffered an an exploit in one of its DAI lending pools, according to the decentralized finance protocol’s official Twitter account.  That exploit drained $11 million.

.

DISCLOSURE

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Trending

1
CoinDesk - Unknown
First Mover Asia: Bitcoin Holds Above $21K in Weekend Trading; Solana Web3 Phone Faces Long Odds

Ether stays over $1,200; prior blockchain phones have failed because the market has realized their functionalities are already available via apps that can be loaded onto any old phone.

CoinDesk - Unknown
2
CoinDesk - Unknown
Opaque Platforms and Intertwined Protocols Pose Big Risk to Crypto

Second article in a series about risks we’re thinking about during these crypto down days.

CoinDesk - Unknown
3
CoinDesk - Unknown
Putin Weaponizes Inflation

Examining a recent propaganda speech from the Russian leader.

CoinDesk - Unknown
4
CoinDesk - Unknown
Morgan Creek Is Trying to Counter FTX’s BlockFi Bailout, Leaked Call Shows

FTX’s $250 million credit facility offer – if inked as initially proposed – stood to effectively wipe out all BlockFi shareholders, including Morgan Creek Digital, the firm told its investors.

CoinDesk - Unknown