Solana-based Crema Finance, a decentralized finance protocol, suffered a hack on July 2 and supposedly lost about $8.7M!
“The incident has made the DeFi protocol suspend its services temporarily.”
Crema Finance Hack
For starters, Crema Finance is a platform that allows its users to swap, earn and build with its programmable liquidity network.
The alleged hacker spotted a vulnerability in the platform and used it to obtain and store the money in Ethereum via the wormhole protocol.
In detail, the hacker created a fake tick account and circumvent Crema Finance’s checks. A tick account is dedicated to storing price tick data in the concentrated liquidity market maker (CLMM) algorithm.
The hacker then deployed a smart contract to lend a flash loan from Solend to provide liquidity on Crema Finance. Afterward, thanks to the faked tick account, the attacker was able to change the pool’s transaction fee and made off with a massive fee.
“Crema Finance has contacted the hacker, offering him 800k to return the funds!”
Stay always up to date:
🕹️Gaming Guild & Scholarships: Join our Discord.
📫Saturday Mail Recap: Subscribe for the Blockchain Gaming Digest.
We use affiliate links when possible. At no cost to you, we may earn some crypto or nfts.
While we strive for the accuracy of the content, we provide it “as-is.” We take no responsibility for any actions or results. We write about games, treat them as games. We don’t give investment advices. Always do your own, extensive research.