{"id":31716,"date":"2022-07-07T04:32:02","date_gmt":"2022-07-07T08:32:02","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=31716"},"modified":"2022-07-07T04:32:31","modified_gmt":"2022-07-07T08:32:31","slug":"crema-hacker-returns-8-million-keeps-1-6-million-in-bounty","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/crema-hacker-returns-8-million-keeps-1-6-million-in-bounty\/","title":{"rendered":"Crema Hacker Returns $8 Million, Keeps $1.6 Million In Bounty"},"content":{"rendered":"\n
As a “white hat bounty,” the Crema Finance team gave the hacker who stole almost $10 million from the protocol 16.7 percent of the stolen money.<\/h5>\n\n\n\n
\n
\"\"<\/figure>\n<\/figure>\n\n\n\n

The hacker who hacked the Solana-based liquidity protocol Crema Finance on July 2 was allowed to keep $1.6 million as a white hat prize.<\/p>\n\n\n\n

The reward, 45,455 Solana (SOL<\/a>), is worth a hefty 16.7 percent of the initial $9.6 million Crema loss, which led the protocol to cease services.<\/p>\n\n\n\n

Crema's crew started looking for the hacker by tracking their Discord handle\r\n \r\n \r\n \r\n <\/g>\r\n \r\n \r\n \r\n <\/clipPath>\r\n <\/defs><\/svg><\/span><\/a> and tracing<\/use><\/svg><\/span><\/a> the initial gas source for the hacker's address. Just as it appeared that the team had discovered the hidden identity, it announced that it had been negotiating with the hacker. The hacker returned 6,064 Ether (ETH) and 23,967 SOL worth around $8 million on July 6.<\/p>\n\n\n\n
\n
\"\"<\/figure>\n<\/figure>\n\n\n\n

The funds were refunded in a sequence of transactions on the Ethereum and Solana networks by the hacker. The initial transaction on each network was a test with a small number of coins, while the subsequent transaction was worth the majority of the monies transmitted.<\/p>\n\n\n\n

Crema users and the team can breathe easier now that the finances have been secured, but there is still work to be done. Before the agreement was reached, the team declared on July 5 that it had submitted a fresh code for auditing to ensure that the same issue did not occur again.<\/p>\n\n\n\n

Although the community is still waiting for an official post-mortem on the attack, the Crema team detailed what happened in a July 3 Twitter thread<\/use><\/svg><\/span><\/a>. The attacker obtained a flash loan through the Solend decentralized finance (DeFi<\/a>) lending protocol, which was then used to fund a Crema pool.<\/p>\n\n\n\n

The hacker then falsified price data to appear to be owed a far larger reward than they were. This enabled them to withdraw “a significant fee amount” of approximately $9.6 million from the pool to which they added the flash loan.<\/p>\n\n\n\n

According to the team's tweet, the Crema protocol will be operational after the audit is completed. By July 8, the team will also release a compensation plan for affected users.<\/p>\n\n\n\n

Crema is fortunate to have recovered as much money as it did, given the disaster that struck the Horizon Bridge on Harmony last month. A hacker stole $100 million in cryptocurrency from Harmony's token bridge and turned down a $1 million white hat reward to restore the assets.<\/p>\n","protected":false},"excerpt":{"rendered":"

As a “white hat bounty,” the Crema Finance team gave the hacker who stole almost $10 million from the protocol 16.7 percent of the stolen money. The hacker who hacked the Solana-based liquidity protocol Crema Finance on July 2 was allowed to keep $1.6 million as a white hat prize. The reward, 45,455 Solana (SOL), […]<\/p>\n","protected":false},"author":33,"featured_media":31719,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21],"tags":[10908],"class_list":["post-31716","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-crema-hacker"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/07\/Crypto-Theft-Insurance-min-1.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/31716","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=31716"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/31716\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/31719"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=31716"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=31716"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=31716"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}