Hack history / 2022 / Hack or exploit
Crema Finance
Hack or exploit on Jul 2, 2022 · Improper Access Control
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$8.8M
sources: $1.7M to $8.8M
Returned
$7.1M
81% of the loss, as a source states it
Rank
#329
among thefts by dollars lost
What happened
On July 2, 2022, Crema Finance's Solana protocol was exploited when an attacker bypassed owner verification on tick accounts used for fee calculations. The attacker created a fraudulent tick account, obtained a flashloan from Solend, added liquidity to the CLMM pool, and exploited the manipulated pricing to drain $8.78M (69,500 SOL + $6.5M stablecoins).
In review: sources disagree on the loss.
Details
- Date
- Jul 2, 2022
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Solana
- Audit (rekt.news)
- Bramah Systems
After the theft
- Returned by the attacker
- yes, amount not stated
“On July 7, Crema Finance said on Twitter that after a long negotiation, Crema Finance attackers agreed to collect 45,455 SOL (about $1.682 million) as a white hat bounty, and had returned 6,064 Ethereum and 23,967.9 SOL (approximately $8.1 million).” (SlowMist Hacked) - Recovered or frozen
- $7.1M
“$8.8M taken, $1.7M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Mirror 2022 · Hack or exploit · $88M
Wintermute 2022 · Hack or exploit · $17.6M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Gym Network 2022 · Hack or exploit · $2.1M
Wintermute 2022 · Hack or exploit · $17.6M
Ankr 2022 · Hack or exploit · $5M
TempleDAO 2022 · Hack or exploit · $2.3M
Gym Network 2022 · Hack or exploit · $2.1M
Cite this page
SwanBluechip, "Crema Finance hack, Jul 2, 2022: $8.8M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht3442a81f14/ (data as of 2026-10-31).