Hack history / 2021 / Hack or exploit
CREAM Lending
Hack or exploit on Aug 30, 2021 · Reentrancy
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$18.8M
sources: $2.3M to $18.8M
Returned
none listed
as the sources state it
Rank
#214
among thefts by dollars lost
What happened
On August 30, 2021, CREAM Finance suffered a reentrancy attack losing 418M AMP tokens and 1,308 ETH (~$18.8M). Using a 500 ETH flash loan as seed capital, the attacker exploited a reentrancy vulnerability in the AMP token callback handler to self-liquidate and withdraw more collateral than deposited.
In review: sources disagree on the loss.
Details
- Date
- Aug 30, 2021
- Kind
- Hack or exploit
- Method
- Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
Reported by
Related incidents
Secured Finance Lending 2026 · Hack or exploit · $104K
Moonwell Lending 2026 · Hack or exploit · $8.7M
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
Moonwell Lending 2026 · Hack or exploit · $8.7M
Surf Lending 2026 · Hack or exploit · undisclosed
DefiTuna Lending 2026 · Hack or exploit · $580K
Fluid Lending 2026 · Hack or exploit · $215K
Cite this page
SwanBluechip, "CREAM Lending hack, Aug 30, 2021: $18.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht2a23e6dcbb/ (data as of 2026-11-01).