1. BITBILIHome
  2. Article

Curve Finance confirms the affected pools in the platform’s exploit

• 208 views

TL;DR Breakdown

  • Curve Finance has confirmed the list of affected pools following the recent hack that it suffered.
  • Assessing the impact and strengthening security for the future.

Description

Curve Finance, a popular decentralized exchange (DEX), recently faced a significant security breach that affected multiple Ethereum pools and an Arbitrum-based liquidity pool. The incident occurred over the weekend, leading to the theft of millions of dollars. As the situation unfolded, blockchain security firm PeckShield updated the stolen amount to an alarming $52 million. Curve … Read more

Curve Finance, a popular decentralized exchange (DEX), recently faced a significant security breach that affected multiple Ethereum pools and an Arbitrum-based liquidity pool. The incident occurred over the weekend, leading to the theft of millions of dollars. As the situation unfolded, blockchain security firm PeckShield updated the stolen amount to an alarming $52 million. Curve Finance’s DEX allows users to swap like-assets, such as Ethereum for Staked Ethereum or Tether’s USDT for Circle’s USDC.

Curve Finance reveals updated information about the hack

The platform serves as a valuable arbitrage tool for traders seeking to take advantage of price discrepancies between assets. The initial reports indicated that the exploit occurred on Sunday, resulting in losses exceeding $24 million. However, the real-time unfolding of the hack revealed a much higher sum. The exchange’s team confirmed that the security breach affected three liquidity pools, involving tokens paired with Ethereum (ETH) and Curve governance token CRV.

Additionally, several ERC-20 tokens issued on Alchemix (alETH), Metronome Synth (smETH), and JPEG’d (pETH) were also compromised due to a vulnerability in older versions of the Vyper compiler. Vyper is a programming language commonly used for writing smart contracts on the Ethereum blockchain. The language’s core team acknowledged that certain outdated versions were susceptible to exploitation, making them a target for hackers. A lead contributor for Vyper took to Twitter, suggesting that the hackers had likely spent a significant amount of time researching and identifying the vulnerability.

As the security breach unfolded, another concerning development emerged regarding the Vyper-based liquidity pool deployed on the layer-2 solution, Arbitrum. The team at Curve Finance revealed that the Tricrypto pool, comprising USDC, wBTC, and ETH, was “potentially affected.” Despite no profitable exploits being discovered by security experts, the team advised liquidity providers to exit this pool due to its vulnerability.

Assessing the impact and strengthening security for the future

The security breach did not remain limited to Curve Finance alone. Another decentralized exchange, Ellipsis, which operates on the BNB Chain, also reported an exploit in its stable swap pools on the same weekend. The impact of the exploit was not confined to the decentralized exchanges. South Korean crypto exchange Upbit took precautionary measures, temporarily suspending deposits and withdrawals of CRV tokens.

The exchange urged its members to closely monitor the situation and be cautious of the increased price volatility surrounding Curve Finance. The incident has raised concerns within the decentralized finance (DeFi) community, as it highlights the importance of robust security measures in the rapidly growing DeFi sector. The vulnerability in older versions of the Vyper compiler underscores the need for continuous auditing and updates to protect smart contracts from potential exploits.

Furthermore, the exploit on Arbitrum-based liquidity pools has prompted the DeFi community to reevaluate the security measures on layer-2 solutions. As the demand for scalable and low-cost solutions increases, it becomes essential to ensure that these layer-2 platforms can withstand potential attacks. As the investigation into the security breach continues, the DeFi community is closely monitoring the situation to understand the full extent of the damage and identify ways to prevent similar incidents in the future.

In light of these events, decentralized exchanges and other DeFi projects are likely to implement additional security protocols and conduct more rigorous audits to safeguard user funds and maintain trust in the ecosystem. As the DeFi landscape evolves, it is imperative for all stakeholders, including developers, liquidity providers, and users, to remain vigilant and prioritize security. Only by proactively addressing vulnerabilities and continuously improving security measures can the DeFi sector continue to thrive and fulfill its promise of transforming the traditional financial landscape.

Disclaimer. The information provided is not trading advice. Cryptopolitan.com holds no liability for any investments made based on the information provided on this page. We strongly recommend independent research and/or consultation with a qualified professional before making any investment decisions.

文章来源于互联网:Curve Finance confirms the affected pools in the platform’s exploit

Disclaimers:

1. You are solely responsible for your investment decisions and this info is not liable for any losses you may incur.

2. The copyright of this article belongs to the writer, it represents the writer's opinions only, not represents the site's ones. Not financial advice.

Previous 2023年8月1日 10:46
Next 2023年8月1日 11:42

Related articles

  • Atomic Wallet hackers move millions of stolen XRP tokens via major exchanges

    TL;DR Breakdown Fallout from the Atomic Wallet hack continues as stolen XRP tokens reappear and flow through major crypto exchanges. Expert team from Xrplorer tracks the stolen tokens, revealing hackers’ use of elaborate money laundering techniques to cover their tracks. Additional updates indicate hackers are cycling through exchanges to offload the stolen funds while authorities intensify efforts to bring them to justice. Description In the aftermath of the infamous Atomic Wallet hack, the repercussions persist as millions of stolen XRP tokens resurface, finding their way into major cryptocurrency exchanges. The incident, which occurred in early June and was allegedly carried out by the notorious North Korean group Lazarus, left a trail of despair among crypto enthusiasts. Recently, a … Read more In the aftermath of the infamous Atomic Wallet hack, the repercussions persist as millions of stolen XRP tokens resurface, finding their way into major cryptocurrency exchanges. The incident, which occurred in early June and was allegedly carried out by the notorious North Korean group Lazarus, left a trail of despair among crypto enthusiasts. Recently, a team of experts from…

    Article 2023年6月23日

  • LayerZero and Immunefi unveil $15 million bug bounty program

    TL;DR Breakdown LayerZero and Immunefi have launched a $15 million bug bounty program to enhance their system’s security and reward ethical hackers for identifying potential vulnerabilities. The bug bounty program covers all major chains and rewards up to $250,000 or 10% of the assets’ value at risk for critical vulnerabilities. LayerZero, valued at $3 billion, has remained free of security exploits or hacks since its launch in March 2022, demonstrating its commitment to secure and reliable blockchain interoperability. To further fortify their system against potential threats, cross-chain messaging protocol LayerZero and security platform Immunefi has joined forces to launch an unprecedented $15 million bug bounty program. This initiative, offering a staggering maximum reward for discovering high-severity vulnerabilities, represents one of the largest financial commitments in the history of bug bounty programs. LayerZero, an omnichain interoperability protocol, permits developers to engage with contracts across various blockchains. In this collaborative endeavor with Immunefi, ethical hackers—often called ‘white hat hackers’—will receive financial rewards for identifying and reporting system vulnerabilities and bugs. To qualify for a reward, hackers must provide a proof-of-concept (PoC) demonstrating…

    Article 2023年5月18日

  • New York drafts new bill to address AI bias

    TL;DR Breakdown The city of New York has implemented a new law that will address areas of bias and promote fairness in using AI tools. The legislation will enable fairness and address complaints. Description New York City recently implemented a new legislation focused on artificial intelligence-driven employment tools, which aims to address bias and promote fairness in employment decisions. The legislation, known as Local Law 144, prohibits employers and agencies from utilizing automated employment decision tools (AEDT) unless these tools have undergone a biased audit within the past year. … Read more New York City recently implemented a new legislation focused on artificial intelligence-driven employment tools, which aims to address bias and promote fairness in employment decisions. The legislation, known as Local Law 144, prohibits employers and agencies from utilizing automated employment decision tools (AEDT) unless these tools have undergone a biased audit within the past year. New York passed legislation to eliminate AI bias Under the regulation, the audit results must be publicly available, and employees, as well as job candidates, must be provided with appropriate notices. The law…

    Article 2023年7月9日

  • Ethereum co-founder Vitalik Buterin falls victim to SIM-swap attack

    TL;DR Breakdown Vitalik Buterin’s Twitter account was hacked due to a SIM-swap attack, leading to a scam that cost users over $691,000. The breach emphasizes the dangers of using phone numbers for authentication and the need for enhanced digital security measures, especially in the cryptocurrency and social media sectors. Description In an era where digital security has become paramount, the recent breach experienced by Ethereum co-founder Vitalik Buterin serves as a stark reminder of the lurking vulnerabilities. Buterin confirmed that his Twitter account, a platform with millions of users and significant influence, was compromised due to a SIM-swap attack. This incident underscores the risks associated … Read more In an era where digital security has become paramount, the recent breach experienced by Ethereum co-founder Vitalik Buterin serves as a stark reminder of the lurking vulnerabilities. Buterin confirmed that his Twitter account, a platform with millions of users and significant influence, was compromised due to a SIM-swap attack. This incident underscores the risks associated with mobile-based security measures and emphasizes the need for heightened awareness and proactive measures, especially in sectors…

    Article 2023年9月13日

  • Former Twitter employees demand $500 million payout

    TL;DR Breakdown Twitter faces a lawsuit accusing it of failing to pay $500 million in severance to laid-off employees post-Elon Musk’s acquisition. Courtney McMillian, ex-Twitter employee, leads the class-action suit, citing an unfulfilled 2019 severance plan. Twitter reportedly offered laid-off employees only one month of severance pay or none at all, contrary to the mentioned plan. Description Social media giant, Twitter, finds itself in hot water after accusations emerged of a severance default to the tune of $500 million. The allegations come from a considerable group of its workforce, who saw their positions terminated following Elon Musk’s acquisition of the company. The alleged broken promise Courtney McMillian, the former overseer of Twitter’s … Read more Social media giant, Twitter, finds itself in hot water after accusations emerged of a severance default to the tune of $500 million. The allegations come from a considerable group of its workforce, who saw their positions terminated following Elon Musk’s acquisition of the company. The alleged broken promise Courtney McMillian, the former overseer of Twitter’s employee benefits programs, also known as the “head of total…

    Article 2023年7月14日
TOP