You Stole $37M, Now What? The $CREAM $ALPHA Exploit Unpacked