1. BITBILIHome
  2. Article

Curve Finance hacker returns part of stolen funds

• 206 views

TL;DR Breakdown

  • Curve Finance lost $24 million in a DeFi exploit.
  • The hacker returned $5.4 million of the stolen funds.
  • Curve’s total value locked (TVL) dropped 43% after the incident.

Description

On July 30, Curve Finance, a prominent stablecoin lending protocol, experienced a significant exploit on several stable pools. The exploit was traced back to vulnerabilities in specific versions of the Vyper compiler, a smart contract programming language for the Ethereum Virtual Machine (EVM), Cryptopolitan reported. However, the affected versions were 0.2.15, 0.2.16, and 0.3.0. The … Read more

On July 30, Curve Finance, a prominent stablecoin lending protocol, experienced a significant exploit on several stable pools. The exploit was traced back to vulnerabilities in specific versions of the Vyper compiler, a smart contract programming language for the Ethereum Virtual Machine (EVM), Cryptopolitan reported.

However, the affected versions were 0.2.15, 0.2.16, and 0.3.0. The exploit mechanism, known as “malfunctioning reentrancy locks,” allowed the attacker to bypass the intended safeguards and drain funds from the targeted contracts.

According to Curve Finance CEO Michael Egorov in a Telegram channel, the swap pool has been drained of 32 million CRV tokens, which are worth over $22 million. However, experts estimate that the total loss could be more than $40 million.

Impact on DeFi ecosystem and Curve Finance

The exploit significantly impacted the DeFi ecosystem, with several projects reporting substantial financial losses. These include decentralized exchange Ellipsis, Alchemix’s alETH-ETH pool, JPEGd’s pETH-ETH pool, and Metronome’s sETH-ETH pool. The total losses were estimated to be upwards of $24 million. The incident triggered a wave of panic across the DeFi ecosystem, prompting a flurry of transactions across various pools. In response to the news, Curve Finance’s native token, CRV, experienced a decline of over 5%.

Hacker returns some funds, and future measures

In a surprising turn, the exploiter returned some of the stolen funds to the protocol. PeckShield, a blockchain security company, reported that the Curve exploiter had returned 2,879 ETH, worth around $5.4 million, to the protocol deployer address. The incident underscores the importance of robust security measures in DeFi protocols. As the investigation progresses and more updates unfold concerning the hack,  developers are expected to work closely with the Vyper team to address the vulnerabilities and prevent future exploits.

It is important to know that this is not the first time Curve Finance has been a target of attack. Its Conic Finance omnipool was exploited last week, resulting in a loss of $3.6 million in Ethereum due to a reentrancy attack.

Additionally, Curve Finance’s total value locked has decreased by 43% since the exploit, dropping from $3.26 billion to $1.87 billion, as reported by DeFiLlama. At the time of press, the CRV token is down by 12%, and trading at $0.645336.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

文章来源于互联网:Curve Finance hacker returns part of stolen funds

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年7月31日 20:01
Next 2023年7月31日 21:00

Related articles

  • Japan’s 10-year yield above 9-year high prompting alarm at BOJ

    TL;DR Breakdown On Tuesday, Japan’s 10-year government bond yield achieved its highest point over nine years. The increase was driven by a growing agreement that the Federal Reserve would choose to keep interest rates elevated for a prolonged period, considering the strength of the U.S. economy. Description On Tuesday, Japan’s 10-year government bond yield attained its highest level in more than nine years. The move is significant to the central bank’s recent market intervention in response to a comparable situation earlier this month. The 10-year yield of the Japanese Government Bond (JGB) climbed by 1 basis point, touching 0.660%, a value not … Read more On Tuesday, Japan’s 10-year government bond yield attained its highest level in more than nine years. The move is significant to the central bank’s recent market intervention in response to a comparable situation earlier this month. The 10-year yield of the Japanese Government Bond (JGB) climbed by 1 basis point, touching 0.660%, a value not witnessed since January 2014. This escalation followed the upward trend of U.S. yields, mirroring its movement. Japan’s 10-year yield crosses…

    Article 2023年8月22日

  • Linda Yaccarino begins Twitter CEO journey

    TL;DR Breakdown Linda Yaccarino, former advertising chief at NBCUniversal, started her role as Twitter’s CEO. Her primary task is to revive Twitter’s falling ad revenue. Former NBCUniversal executive Joe Benarroch also joined Twitter, adding his communication strategy expertise to the team. Stepping into the world of 280 characters, Linda Yaccarino has commenced her tenure as the new Chief Executive Officer of Twitter. The announcement of her appointment, made by tech billionaire Elon Musk, came as a surprise last month. Now, the ex-advertising chief of NBCUniversal is ready to take on the challenges at Twitter, a platform wrestling with dwindling ad revenues. Yaccarino’s background and Twitter’s challenge Possessing a wealth of experience from her time as NBCUniversal’s advertising chief, Yaccarino has her work cut out at Twitter. The platform has been contending with a steep decline in ad revenue, a problem that needs an immediate and effective solution. The social media giant, with its 330 million active users, is hoping that Yaccarino’s expertise can be leveraged to invigorate their ad revenue stream and regain the financial footing it once boasted. The…

    Article 2023年6月11日

  • Central Bank of Kenya considers CBDC but prioritizes existing solutions for payments

    TL;DR Breakdown The Central Bank of Kenya has received feedback on the potential issuance of a digital shilling but has determined that a central bank digital currency (CBDC) is not a compelling priority. The bank acknowledges the benefits and risks associated with a CBDC but believes that existing innovative solutions can address payment system pain points in the country. The CBK will continue to monitor global CBDC developments and prioritize existing payment solutions to provide a secure and accessible network for Kenyans. The Central Bank of Kenya (CBK) has received over 100 comments from stakeholders, including the public, commercial banks, and tech firms, regarding the potential issuance of a central bank digital currency (CBDC). The comments highlighted the potential benefits and risks associated with a CBDC, prompting the central bank to take a measured approach in considering the rollout of a digital shilling. While the CBK acknowledges the advantages of a CBDC, it deems addressing the country’s payment system pain points through existing innovative solutions a higher priority. Press Release – Issuance of Discussion Paper on Central Bank Digital Currency:…

    Article 2023年6月7日

  • Twitter imposes DM limits on unverified accounts to reduce spam

    TL;DR Breakdown Twitter has announced plans to impose daily limits on Direct Messages (DMs) sent by unverified accounts to reduce spam, sparking backlash from its user base. Critics argue that the move could be a strategy to push users towards Twitter’s subscription service, Twitter Blue, and may lead to increased competition from other social media platforms. Description Twitter, the global social media giant, has recently announced its plan to impose daily limits on the number of Direct Messages (DMs) that unverified accounts can send. The company stated that this move is part of its ongoing efforts to reduce spam in Direct Messages.  The announcement has sparked a wave of reactions from Twitter’s … Read more Twitter, the global social media giant, has recently announced its plan to impose daily limits on the number of Direct Messages (DMs) that unverified accounts can send. The company stated that this move is part of its ongoing efforts to reduce spam in Direct Messages.  We’ll soon be implementing some changes in our effort to reduce spam in Direct Messages. Unverified accounts will have daily…

    Article 2023年7月22日

  • OKX expands into the Middle East with licensing approval

    TL;DR Breakdown OKX has obtained a minimal viable product preparation license from the Middle Eastern division to establish an office in Dubai’s World Trade Center. Tim Byun, OKX’s global head of government relations, stressed Dubai licensing’s importance to the exchange’s global regulatory compliance approach. OKX further ventures into France. Cryptocurrency exchange OKX has obtained a minimal viable product preparation license from the Middle Eastern division, enabling its expansion into the Middle East. The license allows OKX to establish an office in Dubai’s World Trade Center and increase its local workforce to 30 employees. The crypto exchange emphasizes the importance of regulatory compliance and security in the current market climate. OKX to offer spot, futures, and fiat services in Middle East expansion According to reports, cryptocurrency exchange OKX’s Middle Eastern division has obtained a minimal viable product preparation license as part of its expansion plans in the Middle East. In a notice dated June 15, the exchange stated that following the regulator’s licensing permission, the exchange expected to extend its employees in Dubai to 30 persons and had already established an…

    Article 2023年6月18日
TOP