1. BITBILIHome
  2. Article

Curve Finance hacker returns part of stolen funds

• 220 views

TL;DR Breakdown

  • Curve Finance lost $24 million in a DeFi exploit.
  • The hacker returned $5.4 million of the stolen funds.
  • Curve’s total value locked (TVL) dropped 43% after the incident.

Description

On July 30, Curve Finance, a prominent stablecoin lending protocol, experienced a significant exploit on several stable pools. The exploit was traced back to vulnerabilities in specific versions of the Vyper compiler, a smart contract programming language for the Ethereum Virtual Machine (EVM), Cryptopolitan reported. However, the affected versions were 0.2.15, 0.2.16, and 0.3.0. The … Read more

On July 30, Curve Finance, a prominent stablecoin lending protocol, experienced a significant exploit on several stable pools. The exploit was traced back to vulnerabilities in specific versions of the Vyper compiler, a smart contract programming language for the Ethereum Virtual Machine (EVM), Cryptopolitan reported.

However, the affected versions were 0.2.15, 0.2.16, and 0.3.0. The exploit mechanism, known as “malfunctioning reentrancy locks,” allowed the attacker to bypass the intended safeguards and drain funds from the targeted contracts.

According to Curve Finance CEO Michael Egorov in a Telegram channel, the swap pool has been drained of 32 million CRV tokens, which are worth over $22 million. However, experts estimate that the total loss could be more than $40 million.

Impact on DeFi ecosystem and Curve Finance

The exploit significantly impacted the DeFi ecosystem, with several projects reporting substantial financial losses. These include decentralized exchange Ellipsis, Alchemix’s alETH-ETH pool, JPEGd’s pETH-ETH pool, and Metronome’s sETH-ETH pool. The total losses were estimated to be upwards of $24 million. The incident triggered a wave of panic across the DeFi ecosystem, prompting a flurry of transactions across various pools. In response to the news, Curve Finance’s native token, CRV, experienced a decline of over 5%.

Hacker returns some funds, and future measures

In a surprising turn, the exploiter returned some of the stolen funds to the protocol. PeckShield, a blockchain security company, reported that the Curve exploiter had returned 2,879 ETH, worth around $5.4 million, to the protocol deployer address. The incident underscores the importance of robust security measures in DeFi protocols. As the investigation progresses and more updates unfold concerning the hack,  developers are expected to work closely with the Vyper team to address the vulnerabilities and prevent future exploits.

It is important to know that this is not the first time Curve Finance has been a target of attack. Its Conic Finance omnipool was exploited last week, resulting in a loss of $3.6 million in Ethereum due to a reentrancy attack.

Additionally, Curve Finance’s total value locked has decreased by 43% since the exploit, dropping from $3.26 billion to $1.87 billion, as reported by DeFiLlama. At the time of press, the CRV token is down by 12%, and trading at $0.645336.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

文章来源于互联网:Curve Finance hacker returns part of stolen funds

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年7月31日 20:01
Next 2023年7月31日 21:00

Related articles

  • YouTube reverses its election misinformation policy

    TL;DR Breakdown YouTube has announced that it has reversed its stance on misinformation regarding the US elections. Implications and controversies surrounding the decision. YouTube, a major online platform, has announced its decision to reverse its rules surrounding election denialism, allowing previously prohibited false claims about the 2020 U.S. election and past presidential elections. The company’s policy shift, effective immediately, marks a significant departure from its previous stance on combating misinformation during the electoral process. Axios initially reported on the changes. YouTube will allow some already removed content In a blog post, YouTube explained its rationale for this decision, stating that while content removal may curb some misinformation, it could inadvertently limit political speech without significantly reducing the risk of real-world harm or violence. With the 2024 campaigns already underway, the platform intends to cease removing content that promotes false claims of widespread fraud, errors, or glitches during the 2020 election and previous presidential elections. However, YouTube will continue to prohibit certain types of false election-related claims. Examples include misleading information about polling place locations and any other efforts aimed at…

    Article 2023年6月8日

  • Atomic Wallet faces class action lawsuit over $100 Million crypto hack losses

    TL;DR Breakdown About 50 Russian and CIS clients launched a class action against Atomic Wallet after a $100 million crypto heist. The breach affected over 5,500 accounts; a Ukrainian group may have orchestrated the heist, challenging initial blame on North Korea’s Lazarus Group. Description A group of high-net-worth investors from Russia and the Commonwealth of Independent States has launched a class action against Atomic Wallet following a $100 million heist that has left investors reeling. The legal action is being coordinated by German lawyer Max Gutbrod and Boris Feldman, a co-founder of Moscow firm Destra Legal. Gutbrod, who was … Read more A group of high-net-worth investors from Russia and the Commonwealth of Independent States has launched a class action against Atomic Wallet following a $100 million heist that has left investors reeling. The legal action is being coordinated by German lawyer Max Gutbrod and Boris Feldman, a co-founder of Moscow firm Destra Legal. Gutbrod, who was once a partner at Baker & McKenzie in Moscow for more than 20 years, has stated that a group of lawyers is currently…

    Article 2023年8月24日

  • Cronos Labs launches the second cohort of its accelerator program

    TL;DR Breakdown Cronos Labs has launched the second cohort of its accelerator program with a $100 million investment. The second cohort will focus on blockchain and AI projects. Cronos Labs has recently announced the launch of its second cohort for its accelerator program. With a substantial $100 million investment, the program aims to support early-stage cryptocurrency projects by offering mentorship and funding opportunities. Cronos Labs to invest $100 million in the program The selected projects for this cohort were carefully handpicked by Cronos Labs. The eight chosen projects include Omnus, DeMe, Furrend, Solace, Sakaba, Eisen Finance, Earn Network, and CorgiAI. Each of these projects received an upfront seed funding of $30,000 and will undergo a 12-week program. The projects cover a wide range of areas within the cryptocurrency space. These include Web3 game development, smart contract wallet integration, loyalty platforms for Web3 gaming, liquid marketplaces for yield-earning opportunities, and an ecosystem for the peer-to-peer economy of artificial intelligence. The program will focus on AI and blockchain projects The theme of this cohort is the bridging of AI and blockchain technology….

    Article 2023年5月30日

  • US economy saw 187,000 new jobs in July; unemployment rate lowers to 3.5%

    TL;DR Breakdown The U.S. economy saw an addition of 187,000 jobs in July, while the unemployment rate also saw a slight decline, reaching 3.5 percent. The annual inflation rate has gradually decreased each month, reaching 3% in June. Description The U.S. economy saw an addition of 187,000 jobs in July, which indicates a healthy gain. The unemployment rate also saw a slight decline, reaching 3.5 percent, as the Bureau of Labor Statistics reported on Friday. The previous two months have had the worst employment growth since December 2020, combined with June’s revised 185,000 jobs … Read more The U.S. economy saw an addition of 187,000 jobs in July, which indicates a healthy gain. The unemployment rate also saw a slight decline, reaching 3.5 percent, as the Bureau of Labor Statistics reported on Friday. The previous two months have had the worst employment growth since December 2020, combined with June’s revised 185,000 jobs gain. However, despite this cooling in job growth, the overall performance is still considered solid and positive for the economy. US economy adds more jobs The U.S. economy…

    Article 2023年8月5日

  • Americans express cautious stance towards CBDC

    TL;DR Breakdown A new report has shown that fewer Americans are inclined to favor a CBDC with more oppose it. Concerns over the partisan divide and its influence on public opinion. A recent series of polls conducted by the Cato Institute, a libertarian think tank based in Washington, D.C., unveiled that only 16% of Americans favor the adoption of a Central Bank Digital Currency (CBDC), while 34% oppose it. The survey indicates that the majority of Americans, 49%, have not developed a strong opinion on the matter. The report showed that 34% of Americans oppose CBDC The Cato Institute highlighted that only 28% of the respondents were familiar with CBDCs, which are tokenized alternatives to cash maintained by governments or central banks, unlike decentralized networks and private companies that issue stablecoins pegged to sovereign currencies. Criticism of CBDCs has emerged within the crypto space, with figures like whistleblower Edward Snowden referring to them as “cryptofascist currencies” that could potentially harm individuals’ savings. Concerns about CBDCs have also been voiced by political figures from both sides of the aisle, such as…

    Article 2023年6月10日
TOP