Digital Asset
Intelligence
Security Incident

Curve Finance Contract Vulnerability

·Historical incident record

Incident Overview

Curve Finance tweeted that a vulnerability was found in the Pool Factory v1 version of the fund pool, and it is recommended that v1 users use crv.finance to withdraw funds immediately. Curve.fi and Pool Factory v2 fund pools do not respond. But it only affects the v1 pool, and hackers cannot use it to steal user funds.

Sources & References

Original incident referencehttps://www.panewslab.com/zh/sqarticledetails/230930.html (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodPhishing attack
    Reported loss20 BTC
  2. Incident date
    Attack methodGovernance Attack
    Reported loss$ 30,000,000
  3. Incident date
    Attack methodMalicious Code Injection Attack
    Reported loss$ 428,000
  4. Incident date
    Target

    CNA

    Attack methodRansomware
    Reported loss$ 40,000,000
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 31,000,000