BTC—ETH—

Incident All ledgers

CREAM Lending: $130.0m

CREAM Lending lost $130.0m on 27 October 2021. Ranked 32nd of 1,272 crypto failures, with method, returned funds and comparable incidents.

Date
27 October 2021
Lost
$130.0m
Returned or repaid
None recorded
Target
DeFi Protocol
Category
Oracle Manipulation
Method
Spot Price Manipulation
Chains
Ethereum

CREAM Finance lost about $130 million on October 27, 2021, when an attacker used flashloans from MakerDAO and Aave to manipulate the yUSD price and mint unbacked yUSD and crYUSD by abusing vault accounting across Curve and Aave.

Against the ledger

Other incidents named CREAM

DateTargetLostTypeMethodReturned
30 Aug 2021CREAM Lending$18.8mDeFi ProtocolReentrancy—

Closest in size by the same method

DateTargetLostTypeMethodReturned
11 Oct 2022Mango Markets V3$115.0mDeFi ProtocolSpot Price Manipulation—
18 May 2021Venus Protocol$100.0mDeFi ProtocolSpot Price Manipulation—
19 May 2021Bunny$45.0mDeFi ProtocolSpot Price Manipulation—
21 Sept 2021Vee Finance$34.0mDeFi ProtocolSpot Price Manipulation—
12 May 2021xToken$24.0mDeFi ProtocolSpot Price Manipulation—

All failures in 2021 · The failures ledger

Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.

Cite this Bitminer.io, “CREAM Lending, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/cream-lending-2021-10-27/. How this is built