shield Price Manipulation · $130M loss

CreamFinance Hack: How $130M Was Lost in a Price Manipulation (2021)

On October 2021, CreamFinance was exploited in a price manipulation, resulting in approximately $130M in losses. That makes the CreamFinance exploit the 5th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the CreamFinance Price Manipulation Played Out

Exploit Class Applied to CreamFinance

The CreamFinance incident on October 27, 2021 is classified as a Price Manipulation. The attacker drives the on-chain price of a token up or down within a single transaction to extract value from the protocol. In the full archive, CreamFinance is 1 of 85 documented price manipulation incidents.

CreamFinance in Context

The $130M loss at CreamFinance is the largest price manipulation incident in our archive, ahead of GMX (2025, $41M).

Prior Price Manipulation Before CreamFinance

The nearest price manipulation incident before CreamFinance was Indexed Finance, 12 days earlier on October 15, 2021 ($16M lost). The same exploit class surfaced again within the price manipulation attack surface.

Impact & Recovery for CreamFinance

CreamFinance Loss Figure

The CreamFinance exploit caused $130,000,000 in losses — a mega ($100M+) incident and the 1st largest of 37 documented in 2021. This single incident represents 61.8% of all tracked losses that year.

Where CreamFinance Sits Among Price Manipulation Attacks

Ranked by loss size, CreamFinance is the 1st largest of 85 price manipulation incidents documented. That puts the CreamFinance loss above the class average of $3.9M.

Timeline Since the CreamFinance Incident

The CreamFinance exploit occurred 4.5 years ago (1,630 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for CreamFinance

Public post-mortem / on-chain analysis for the CreamFinance incident: view source.

FAQ

How much did CreamFinance lose?

The CreamFinance exploit in October 2021 resulted in $130,000,000 in losses — the 1st largest of 37 DeFi incidents that year.

When did the CreamFinance hack happen?

The CreamFinance exploit was recorded on October 27, 2021 — 1,630 days ago.

What type of exploit hit CreamFinance?

The CreamFinance incident is classified as a Price Manipulation. The attacker drives the on-chain price of a token up or down within a single transaction to extract value from the protocol.

How common is the Price Manipulation pattern seen at CreamFinance?

Our archive contains 85 documented price manipulation incidents. The CreamFinance incident is one of them.

How does CreamFinance compare to the largest Price Manipulation attack?

The largest price manipulation incident in our archive is GMX (2025) at $41M. The CreamFinance loss is $130M.

What are the key levels blockchain technology improved in the auditing sector according to a study conducted in Egyptian banks?

Saving time, improving efficiency, setting up continuous audit processes, and developing new advisory services.

Which country leads in publications related to I4.0 technologies in humanitarian supply chains?

China, followed by the United States and the United Kingdom.