Crema Finance Attacker Returns Almost $8M, Keeps $1.7M Bounty

The exploit concerned the attacker making a faux tick account on Crema. A tick account is “a devoted account that shops worth tick knowledge in CLMM,” the builders mentioned, referring to Crema’s market-making protocol. After that, the attacker exploited a command by writing the info on the faux account and circumventing safety measures.