Digital Asset
Intelligence
Security Incident

Curve Finance Account Compromise

·Historical incident record

Incident Overview

Curve Finance’s official website and X account were compromised in quick succession. On May 5, attackers first took control of the project’s X account and used it to post a phishing message promoting a fake airdrop. Then on May 12, the project issued a warning that the Curve frontend had been “hijacked,” in what appeared to be a domain takeover incident.

Sources & References

Original incident referencehttps://www.web3isgoinggreat.com/?id=curve-finance-website-and-twitter-account-hacked (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodAffected by Vyper Vulnerability
    Reported loss$ 25,123,594
  2. Incident date
    Attack methodMalicious Code Injection Attack
    Reported loss$ 428,000
  3. Incident date
    Attack methodGovernance Attack
    Reported loss$ 30,000,000
  4. Incident date
    Target

    BitoPro

    Attack methodMalicious Software
    Reported loss$ 11,500,000
  5. Incident date
    Target

    TRON DAO

    Attack methodAccount Compromise
    Reported lossNot disclosed