Leaderboard
147All-time rank
CREAM Lending
Aug 30, 2021
$18.8M
Lost
$18.8M
Recovered
$0
Net loss
$18.8M
Unrecovered0% recovered
8M). Using a 500 ETH flash loan as seed capital, the attacker exploited a reentrancy vulnerability in the AMP token callback handler to self-liquidate and withdraw more collateral than deposited.
How the exploit worked
View reproducible PoCFlashloan Attack + Reentrancy.
Lost: $18 million
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Reentrancy
- Technique
- Reentrancy
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Aug 30, 2021Exploit executed — $18.8M drained via reentrancy
- Attributed to Unknown
- Recovery status Unrecovered 0%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)