Verify a decision

{"actor":"system:backfill","investigation_id":"3da751e1-b8be-425d-9938-6197061f36fb","kind":"publish","page_slug":"cream-lending","published_at":"2026-05-21T17:13:06.780Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"CREAM Lending","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/review/cream-finance","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/academy/what-is-cream-finance","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/hacks/cream-finance-third-largest-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://thedefiant.io/cream-and-alpha-finance-get-hacked-for-37-5m","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/alpha-homora-loses-37-million-following-iron-bank-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/57660/a-37-million-defi-heist-cost-attackers-just-15000-in-transaction-fees","type":"other","url":""},{"credibility":3,"name":"https://coingape.com/cream-finance-gets-exploited-for-37-5-million/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-august-2021","type":"other","url":""},{"credibility":3,"name":"https://www.theregister.com/2021/08/31/cream_finance_theft","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/defi-protocol-cream-finance-exploited-015120517.html","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-brief-analysis-of-cream-finance-hacked-event-30b18e1db8c","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-october-2021","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/10/27/cream-finance-exploited-in-flash-loan-attack-worth-over-100m","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/122241/ethereum-defi-protocol-cream-finance-hacked-for-115-million","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/hackers-steal-130-million-from-cream-finance-the-companys-3rd-hack-this-year","type":"other","url":""},{"credibility":3,"name":"https://www.bloomberg.com/news/articles/2021-10-27/defi-protocol-cream-finance-loses-130-million-in-latest-hack","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84590/cream-finance-suffers-third-hack-losing-over-130-million","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/hack-analysis-cream-finance-oct-2021-fc222d913fc5","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/cream-rekt-2","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-august-2021","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84590/cream-finance-suffers-third-hack-losing-over-130-million","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/hack-analysis-cream-finance-oct-2021-fc222d913fc5","type":"other","url":""},{"credibility":3,"name":"https://www.theregister.com/2021/08/31/cream_finance_theft","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2021/11/14/cream-plunges-on-news-that-hack-compensation-will-inflate-token-supply","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/cream-finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@investigationsbyzachxbt/22-000-eth-embezzled-and-over-ten-projects-failed-the-story-of-machi-big-brother-jeff-huang-a1ad073fcfa8","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/235220/crypto-sleuth-zachxbt-sued-for-defamation","type":"other","url":""},{"credibility":3,"name":"https://blockworks.co/news/jeffrey-huang-zachxbt-defamation","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/244776/jeffrey-machi-big-brother-huang-drops-defamation-suit-against-crypto-sleuth-zachxbt","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/machi-big-brother-withdraws-defamation-lawsuit-against-zachxbt","type":"other","url":""},{"credibility":3,"name":"https://nftnow.com/news/nft-pro-trader-machi-big-brother-files-defamation-suit-against-web3-sleuth-zachxbt/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/cream-finance/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/11/14/cream-plunges-on-news-that-hack-compensation-will-inflate-token-supply","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?collection=cream","type":"other","url":""}]}],"sources_used":[],"summary":"C.R.E.A.M. Finance (Crypto Rules Everything Around Me) is a decentralized lending and borrowing protocol launched in August 2020, forked from Compound Finance. The protocol suffered three major exploits in 2021 totaling approximately $185 million in losses, making it one of the most frequently and severely hacked DeFi protocols in history. On-chain investigator ZachXBT flagged the protocol and its founders, and the CREAM token has collapsed more than 99% from its all-time high.","timeline":[{"date":"2020-08-03","event":"CREAM Finance launches on Ethereum, forked from Compound Finance, co-founded by Jeffrey Huang and Leo Cheng.","source":""},{"date":"2021-02-04","event":"CREAM token reaches all-time high of $373.16.","source":""},{"date":"2021-02-13","event":"Hack 1: CREAM Finance Iron Bank exploited via Alpha Homora V2 uncollateralized lending vulnerability. Approximately $37.5 million lost across ETH, USDC, USDT, and DAI. CREAM and ALPHA tokens fall ~30%.","source":""},{"date":"2021-08-30","event":"Hack 2: CREAM Finance exploited via ERC-777 reentrancy vulnerability in AMP token integration. Approximately 2,804 ETH and 462 million AMP tokens drained, worth $18.8–25 million. AMP token price falls ~15%.","source":""},{"date":"2021-10-27","event":"Hack 3: CREAM Finance suffers largest exploit — approximately $130 million drained via flash loan oracle price manipulation against yUSDVault. Third-largest DeFi hack recorded at the time. CREAM token falls over 30%.","source":""},{"date":"2021-10-27","event":"CREAM Finance posts on-chain message to attacker: 'you win. we're rekt. please return funds.' A 10% bounty offer yields no recovery.","source":""},{"date":"2021-11-14","event":"CREAM announces hack compensation plan: 1.45 million CREAM tokens to be issued from treasury, dramatically expanding circulating supply. Token drops from ~$88 to ~$51.","source":""},{"date":"2022-06-16","event":"ZachXBT publishes article alleging CREAM co-founder Jeffrey Huang (Machi Big Brother) embezzled 22,000 ETH from Formosa Financial and lists CREAM among over ten failed projects.","source":""},{"date":"2022-09-12","event":"CoinDesk reports CREAM Finance exploiter converts $1.75 million in stolen funds to Bitcoin, indicating laundering activity continues more than a year after the October 2021 hack.","source":""},{"date":"2023-06-17","event":"Jeffrey Huang files defamation lawsuit against ZachXBT over the June 2022 article.","source":""},{"date":"2023-08-15","event":"Huang drops defamation lawsuit against ZachXBT by mutual agreement. ZachXBT updates article title and removes 'embezzled' language, adding additional context.","source":""},{"date":"2025-12-30","event":"CREAM token reaches all-time low of approximately $0.71, down more than 99.8% from its 2021 peak.","source":""}]},"v":1}