Leaderboard
34All-time rank
CREAM Lending
Oct 27, 2021
$130M
Lost
$130M
Recovered
$0
Net loss
$130M
Unrecovered0% recovered
On October 27, 2021, CREAM Finance was exploited for $130 million via flashloan-enabled oracle manipulation. Attacker used flashloans from MakerDAO and Aave to manipulate yUSD price, then minted unbacked yUSD and crYUSD by exploiting vault accounting and composability across Curve and Aave.
- Target
- DeFi
- Classification
- Oracle Manipulation
- Technique
- Spot Price Manipulation
- Attribution
- Unknown
- Chains
Ethereum
Event timeline
- Oct 27, 2021Exploit executed — $130M drained via spot price manipulation
- Attributed to Unknown
- Recovery status Unrecovered 0%