Incident All ledgers
CREAM Lending: $18.8m
CREAM Lending lost $18.8m on 30 August 2021. Ranked 141st of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 30 August 2021
- Lost
- $18.8m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Reentrancy
- Method
- Reentrancy
- Chains
- Ethereum
On August 30, 2021, CREAM Finance lost about $18.8M (418M AMP and 1,308 ETH) when an attacker used a 500 ETH flash loan to exploit a reentrancy flaw in the AMP token callback, self-liquidating and withdrawing more collateral than deposited.
Against the ledger
- It ranks 141st of the 1,272 incidents with a known loss, and 29th in 2021.
- It accounts for 2.4% of the $798.2m in known losses in August 2021.
- 61 incidents in the ledger are classified as Reentrancy, for $458.1m in total. This one is 4.1% of that.
- The ledger records no returned funds.
Other incidents named CREAM
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 27 Oct 2021 | CREAM Lending | $130.0m | DeFi Protocol | Spot Price Manipulation | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 09 Jul 2025 | GMX V1 EVM | $42.0m | DeFi Protocol | Reentrancy | $40.0m |
| 18 Dec 2021 | Grim Finance | $30.0m | DeFi Protocol | Reentrancy | — |
| 03 Sept 2024 | Penpie | $27.0m | DeFi Protocol | Reentrancy | — |
| 19 Apr 2020 | dForce Lending | $25.0m | DeFi Protocol | Reentrancy | — |
| 14 May 2021 | flash.sx / vaults.sx | $13.0m | DeFi Protocol | Reentrancy | — |
All failures in 2021 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “CREAM Lending, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/cream-lending-2021-08-30/. How this is built