Cream Finance Suffers Another Flash Loan Attack, Losing $136 Million

<p>Cream Finance, the DeFi lending protocol, has been hit by another flash loan attack. This time, the attacker stole DeFi tokens worth nearly $136 million.</p> <p>Protocol for decentralised lending Cream Finance has been the target of a significant flash loan attack. The attacker obtained a $2 billion loan from Aave and fled with over $136 million in Ethereum-based tokens.</p> <p>Cream Finance Suffers Another Attack From Flash Loans</p> <p>Cream Finance has been taken advantage of.</p> <p>Earlier today, an attacker successfully used a flash loan to borrow 524,102.159 ETH from Aave, which is worth approximately $2 billion at today's prices. They then drained Cream Finance of several DeFi tokens, pocketing approximately $136 million at peak prices, according to Zerion. The attack cost $36,574.34 and the transaction can be viewed on Etherscan.</p> <p>PeckShield, a firm that audits smart contracts, announced the attack this afternoon on Twitter, while Cream Finance stated that it was "investigating an exploit on C.R.E.A.M. v1 on Ethereum." The team added that it would provide additional updates as they become available.</p> <p>According to Etherscan, the attacker transferred at least $92 million to one Ethereum wallet and $23 million to another. The funds were primarily made up of Cream LP tokens, which are earned by providing liquidity to the protocol, as well as XSUSHI, WNXM, YFI, and a variety of other ERC-20 tokens and stablecoins.</p> <p>The attacker left the following message in the transaction's input data:</p> <p>“Baave lucky, iron bank lucky, cream not. incest bad, don't do”</p> <p>The message is almost certainly referring to Cream Finance's Iron Bank, which Alpha Finance utilises in conjunction with Cream. Following the attack, Alpha Finance issued an update confirming that Iron Bank and its Alpha Homora V2 product were "safe." Yearn Finance also issued an update, confirming that none of its products were impacted and that its team was assisting Cream with the investigation of the exploit.</p> <p