Throughout this assessment, we [Trail of Bits] sought to answer various questions about the security of CREAM. We focused on flaws that would allow an attacker to:
Manipulate asset prices returned by the price oracles.
Subvert the imposed caps on borrowing or supplying.
