Decentralized finance platform Crema Finance announced that it was hacked on Saturday and had about $8.8 million stolen during the attack.Â
In a series of tweets over the July 4 weekend, the company explained that the hacker used several novel tactics enabling them to take out six flash loans, a common tactic of DeFi attackers.Â
The company said it is now working with law enforcement and blockchain security companies to trace the stolen funds. In total, the hackers stole ​​69,500 SOL, which is worth about $2.3 million and stablecoins worth about $6.5 million.Â
It sent a message to the hackers, offering them $800,000 in exchange for the return of the stolen funds.Â
“Your addresses on both Solana and Ethereum, have been blacklisted and all eyes are on you right now. You have 72h from now to consider becoming a white hat and keeping $800k as the bounty,” the company said in a note to the hacker.Â
“And transfer remaining funds back to our contract-update-authority address. Otherwise the police and legal force will officially get involved and there will be endless tracing waiting for you.”Â
Several blockchain security companies showed that the hacker conducted the exploit by uploading a malicious on-chain program which could then be used to deploy multiple flash loan attacks.Â
Flash loan attacks are when a hacker uses a fast, uncollateralized loan to target vulnerabilities in a project’s design.
Flash loan attacks have become one of the most popular ways hackers target DeFi platforms. In April, hackers stole $11.2 million worth of Binance Coin from DeFi platform Elephant Money.Â
Cream Finance was hit with three different flash loan attacks in 2021, costing the DeFi platform $130 million in October, $37 million in February and another $29 million in August.
Blockchain analysis firm Chainalysis said at least $2.2 billion was stolen from DeFi protocols in 2021. Last month, the Ronin Network announced that hackers stole more than $500…
