Scream Hack

Reported loss $35.0M
Oracle Issue

What happened

Scream accumulated roughly $35 million in bad debt in May 2022 after the fUSD and DEI stablecoins lost their pegs. The protocol treated those assets as worth $1, so borrowers could post impaired collateral and withdraw more liquid assets than the collateral was worth.

Technical root cause

Fixed $1 collateral prices did not reflect the depegging of fUSD and DEI, allowing impaired collateral to support excessive borrowing. The reported loss represents bad debt rather than a direct treasury withdrawal.

How it happened

  1. fUSD and DEI traded below their intended dollar peg.
  2. Scream continued to value those assets at $1.
  3. Borrowers deposited overvalued collateral and withdrew liquid assets such as USDC, DAI, wETH or wFTM.
  4. The resulting positions became bad debt; Scream paused affected markets and attempted to seize collateral.
  5. The reported loss therefore describes depeg-driven bad debt, not necessarily a direct treasury theft.

Protocol details

Classification Stablecoin / Borrowing and Lending
Protocol Type Lending
Affected asset / contract Scream
Protocol links Website @Screamdotsh

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.