The #Cream #Finance lightning loan attackers have swapped 500,000 #DAIs for #ETH and transferred them to addresses beginning with 0xdeCE.