Crema Finance Breach
Date: July, 2022Crema Finance is an asset management and liquidity protocol. The platform allows traders and customers to trade, buy, and sell liquid assets.
What Was the Breach?
Crema Finance was repeatedly breached throughout 2021. Over the previous two years, the string of Crema Finance breaches makes it clear that the internet is becoming increasingly dangerous. Here's a quick recap of the breach.
How Did the Breach Occur?
The thieves responsible for the breach stole more than $8 million of cryptocurrency from Crema Finance, a DeFi platform. DeFi is a popular acronym used for decentralized finance. Perhaps the most interesting component of this digital attack is that the victim live-tweeted the breach as it occurred.
The self-dubbed white hat hacking collective behind the theft used a flash loan attack. Fast loan attacks consist of rapid unsecured loans that zero in on weaknesses within an underlying design. The white hat hackers generated phony tick accounts that contain price tick information within centralized liquidity market makers, or CLMMs for short. This strategy bypassed the DeFi platform's owner check process by generating an initialized tick, creating an opportunity to transmit contracts and lend flash loans for liquidity and the theft of funds.
When Did This Breach Occur?
This breach occurred in July 2022. Crema also suffered breaches in February, August, and October 2021.
Who Does the Breach Impact?
The breach impacts Crema Finance as well as its customers. Crema Finance account holders who owned stablecoins or SOL were victimized in the attack. The digital infiltration reinforces the need for up-to-date protections that prevent account takeovers.
How Many Files Does the Breach Affect?
Crema Finance admitted that $8 million of cryptocurrency was stolen in the attack.
Recent Breaches
Cisco Duo Breach
Cisco Duo is an access security provider that offers solutions for small business and commercial control products, including multi-factor authentication (MFA), single sign-on, and access control services....
AT&T Breach
American Telephone and Telegraph Company (AT&T) is the fourth-largest telecommunications provider, behind Verizon, Comcast, and China’s state-funded communications solution...
Fujitsu Limited Breach
Fujitsu Limited is the world’s sixth-largest IT service provider. Based in the Minato City ward of Tokyo, Japan, Fujitsu offers various technology solutions for personal and commercial use...
Cybersecurity and Infrastructure Security Agency Breach
The CISA collaborates with other government agencies to notify victims of breaches and respond to threats. These include the Federal Bureau of Investigation, the Multi-State Information Sharing & Analysis...
Roku Inc. Breach
Roku is a global streaming and entertainment organization. It offers solutions for direct streaming, live channels, music, niche channel entertainment, smart home devices, travel technology, audio options,...