Solana-Backed Crema Finance Loses $8.78 Million Worth of Cryptocurrency in Hack Attack

Hacker(s) deployed a smart contract and used it to lend a flash loan and validate liquidity. The smart contract was later suspended to avoid the loss of more funds.

By Radhika Parashar | Updated: 4 July 2022 17:58 IST

Solana-Backed Crema Finance Loses $8.78 Million Worth of Cryptocurrency in Hack Attack

Photo Credit: Pixabay/ Gerd Altmann

The value locked on Crema fell from over $12 million to $3 million

Highlights

Crema has teamed-up with relevant security agencies for help
The hacker swapped the stolen fund into SOL 69422.9 and USDCet 6,497,738
Crema Finance was launched January this year

Crema Finance, a Solana blockchain-based liquidity protocol, lost a big chunk of crypto assets after being breached in a hack attack over the weekend. Crypto assets worth $8.78 million (roughly Rs. 69 crore) were leaked out of Crema Finance after the hacker(s) deployed a smart contract and used it to lend a flash loan and validate liquidity. The smart contract was later suspended to avoid the loss of more funds. The developers of Crema Finance disclosed details about this breach on Twitter.

“The hacker swapped the stolen fund into SOL 69422.9 and USDCet 6,497,738 via Jupiter. The USDCet was then bridged to Ethereum network via Wormhole and swapped to ETH 6064 via Uniswap after that,” the Crema Finance team wrote as part of its elaborate tweet thread.

4) After creating the fake tick account, the hacker circumvented our routined owner check on the tick account by writing the initialized tick address of the pool into the fake account. Txid: https://t.co/X0IneBg9ut
— CremaFinance (@Crema_Finance) July 3, 2022

The hacked funds have been located by the company and are being monitored closely to follow any other movement.

Crema has also teamed-up with relevant security agencies for assistance in the case.

Hackers Breach British Army’s Twitter, YouTube Accounts to Promote NFTs

“We're still open to a communication with the hacker before the time window is closed. Now we are working on the technical fixing and fund tracing simultaneously. Contract will be resumed with issue fixed after the investigation is all done and a resolvement plan is made,” the company noted.

Launched in January this year, Crema Finance allows liquidity providers to set specific price ranges, add single-sided liquidity and do range order trading on Solana.

In the last two days, the value locked on Crema fell from over $12 million (roughly Rs. 94 crore) to $3 million (roughly Rs. 23 crore), a report by Coindesk said.

Crypto Lender Vauld Suspends Withdrawals: Here's Why

Last week, Chainalysis launched a hotline to accept reports of such events. If entities are approached with suspicious crypto payment requests from strangers, they can call up this hotline and register their alerts.

In a blog-post titled ‘Crypto Incident Response', Chainalysis said that hackers caused thefts and damages of up to $3 billion (roughly Rs. 23,486 crore) from 251 attacks in 2021.

So far in 2022, cyber criminals have stolen over $1.7 billion (roughly Rs. 13,210 crore) in digital assets with Decentralised Finance (DeFi) protocols accounting for 97 percent of the total, a different report by Chainalysis had recently claimed.

The $625 million (roughly Rs. 4,660 crore) Ronin bridge breach in late March and the $320 million (roughly Rs. 2,486 crore) Wormhole attack in February were the main sources of the loot.

Is Poco F4 5G a new best-of contender under Rs. 30,000? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: Cryptocurrency, Solana, Crema Finance

Radhika Parashar

Email Radhika

Radhika Parashar is a senior correspondent for Gadgets 360. She has been reporting on tech and telecom for the last three years now and will be focussing on writing about all things crypto. Besides this, she is a major sitcom nerd and often replies in Chandler Bing and Michael Scott references. For tips or queries you could reach out to her at RadhikaP@ndtv.com. More