{"investigation":{"slug":"curve-dex","entity_name":"Curve DEX","trust_score":62,"severity_base":null,"score_modifier":24,"confidence":0.88,"status":"published","content_type":"investigation","summary":"Curve Finance is a major decentralized exchange and automated market maker (AMM) on Ethereum, optimized for low-slippage swaps of pegged assets such as stablecoins. On July 30, 2023, several of its liquidity pools were drained of approximately $70 million due to a reentrancy vulnerability in the Vyper smart contract compiler (versions 0.2.15, 0.2.16, and 0.3.0), one of the largest DeFi exploits of 2023. Separately, founder Michael Egorov's practice of using large CRV holdings as loan collateral across multiple DeFi protocols created systemic risk that culminated in a $140 million liquidation event in June 2024, generating over $10 million in bad debt across connected protocols.","sections":[{"content":"Curve Finance was founded by Michael Egorov, a Russian physicist and entrepreneur, and launched in early 2020. Egorov previously co-founded NuCypher, a privacy-focused infrastructure company. The protocol introduced the StableSwap invariant, an AMM formula that combines constant-sum and constant-product market makers to minimize slippage for swaps between price-pegged assets such as stablecoins and wrapped tokens. The CRV governance token and DAO contracts were deployed in August 2020, initially by an anonymous community member (0xc4ad) rather than the Curve team directly. In 2021 Curve launched Cryptoswap (Curve v2), extending its AMM design to volatile asset pairs, and expanded to Layer 2 networks and alternative Layer 1 chains including Polygon, Arbitrum, Avalanche, and Fantom. At its peak, Curve was among the largest DeFi protocols by total value locked (TVL), reaching over $3.26 billion before the July 2023 exploit. The protocol later launched crvUSD, its own decentralized stablecoin, and Curve Lend, a lending market. As of 2025, Curve holds roughly $2 billion in TVL, predominantly on Ethereum, and claims approximately 44% of DEX fee revenue on the network.","heading":"Background","sources":[{"url":"https://www.gemini.com/cryptopedia/curve-finance-liquidity-provider-dao","name":"","type":"other","credibility":3},{"url":"https://defillama.com/protocol/curve-finance","name":"","type":"other","credibility":3},{"url":"https://coinbureau.com/review/curve-finance-crv","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"On July 30, 2023, multiple Curve Finance liquidity pools were exploited through a reentrancy vulnerability rooted in the Vyper smart contract compiler rather than in Curve's own application logic. Vyper versions 0.2.15, 0.2.16, and 0.3.0 contained a flaw that disrupted the non-reentrant guard, causing a mismatch in storage slots. Attackers were able to intervene between contract function calls, distort LP token price calculations, and drain pool balances. The exploits hit at least four separate pools in rapid succession: JPEG'd's pETH-ETH pool (approximately $12 million), Alchemix DAO's alETH-ETH pool (approximately $20 million), Metronome DAO's sETH-ETH pool (approximately $1.6 million), and Curve's own CRV/ETH pool (approximately $18 million), along with additional CRV tokens. Initial estimates placed total losses at approximately $70 million. The protocol's TVL fell 47%, from $3.26 billion to approximately $1.73 billion within one day. Curve Finance offered a $1.85 million bounty for information identifying the attacker. White hat MEV bot operator c0ffeebabe.eth front-ran the attacker to recover approximately $5.3 million from the CRV/ETH pool and approximately $1.6 million from the Metronome pool, and later returned those funds to the affected protocols. The alleged Alchemix attacker voluntarily returned approximately $12.7 million (4,820 alETH and 2,258 ETH) by August 8, 2023. JPEG'd recovered approximately $10 million of its losses. As of August 7, 2023, roughly 73% of all stolen funds had been returned, leaving an estimated net loss of approximately $18–20 million unrecovered. In December 2023, the Curve DAO voted with 94% approval to disburse $49.2 million in compensation to affected liquidity providers, funded through a combination of ETH recovered by white hats distributed to the DAO and newly minted CRV tokens vested over time.","heading":"The Vyper Reentrancy Exploit","sources":[{"url":"https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/","name":"","type":"other","credibility":3},{"url":"https://blockworks.co/news/curve-suffers-exploit","name":"","type":"other","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-vyper-bug-hack-july-2023","name":"","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/curve-vyper-exploit-whole-story-so-far","name":"","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/curve-finance-disburse-49-million-compensation-hack-victims","name":"","type":"other","credibility":3},{"url":"https://techcrunch.com/2023/08/01/curve-finances-62m-exploit-exposes-larger-issues-for-defi-ecosystem/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Prior to and following the July 2023 exploit, founder Michael Egorov had amassed approximately $100 million in borrowings across multiple DeFi lending protocols — including Aave, Fraxlend, Inverse Finance, and others — collateralized almost entirely by CRV tokens. At the time of the exploit, Egorov held roughly 427.5 million CRV (approximately 47% of the circulating supply) pledged as collateral. The sudden CRV price drop triggered by the exploit placed these positions near liquidation thresholds and threatened systemic contagion: a forced liquidation of such a large CRV position into thin market liquidity risked crashing the token's price further and generating bad debt across multiple protocols simultaneously. To stabilize his positions, Egorov conducted a series of over-the-counter (OTC) sales of CRV tokens in August 2023. He sold a total of approximately 106 million CRV for $42 million at $0.40 per token to 53 investors, with a non-binding 'gentleman's agreement' that buyers would not sell their tokens before February 2024. Notable buyers included Wintermute, Justin Sun (Tron), Jeffrey Huang (Machi Big Brother), and DW Labs. By September 2023, Egorov had deposited $35 million in CRV to close his Aave position entirely. When the informal six-month lockup expired in February 2024, several OTC buyers began moving CRV to exchanges and selling, causing CRV to fall below $0.40. The second and more severe crisis occurred in June 2024. Between June 12 and 13, 2024, CRV's price dropped approximately 24–30%, breaching Egorov's liquidation thresholds. His entire position — $95.7 million in stablecoin loans (primarily crvUSD) collateralized by $141 million in CRV — was liquidated across five protocols: Inverse Finance, UwU Lend, Fraxlend, Curve's own LlamaLend, and Aave. Two of Egorov's LlamaLend accounts generated over $1 million in bad debt. In total, Curve Lend incurred approximately $11.5 million in bad debt from the cascading liquidation. Egorov subsequently sold 30 million CRV to Christian Seale of NextGen Venture Partners for $6 million USDT to clear the bad debt, which he stated was fully repaid. A December 2024 CRV price slump triggered a third liquidation event, described by CoinDesk as a repeat scenario. Separately, allegations circulated in 2026 (on Crypto Times, April 27, 2026) that Egorov used CRV-backed borrowings to purchase real estate, though that report characterizes itself as a fact-check rather than a confirmed finding.","heading":"Egorov's Loan Crisis","sources":[{"url":"https://www.coindesk.com/markets/2023/07/31/a-curve-founders-168m-stash-is-under-stress-creating-a-risk-for-defi-as-a-whole","name":"","type":"other","credibility":3},{"url":"https://www.theblock.co/post/243183/michael-egorov-has-sold-a-total-of-106-million-crv-for-42-million","name":"","type":"other","credibility":3},{"url":"https://www.coindesk.com/business/2023/08/03/curve-founder-still-owes-80m-despite-raising-nearly-30m-in-past-two-days","name":"","type":"other","credibility":3},{"url":"https://protos.com/curve-finance-gentlemans-agreement-expires-counterparties-dump-crv/","name":"","type":"other","credibility":3},{"url":"https://decrypt.co/235149/curve-founder-liquidation-crv-token","name":"","type":"other","credibility":3},{"url":"https://thedefiant.io/news/defi/curve-finance-founder-michael-egorov-suffers-massive-liquidations","name":"","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/curve-finance-michael-egorov-bad-debt-llamma","name":"","type":"other","credibility":3},{"url":"https://www.coindesk.com/business/2024/12/19/founder-of-de-fi-giant-curve-gets-liquidated-again-as-crv-slumps","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Following the July 2023 exploit, Curve Finance undertook several remediation steps. Gauge emissions to affected pools were suspended. The development team deployed new pool implementations using corrected Vyper versions or alternative compilers, creating replacement pools for alETH, msETH, and pETH paired with WETH. In December 2023, the Curve DAO passed a governance proposal with 94% approval to disburse $49.2 million in compensation to affected liquidity providers, structured as approximately 5,919 ETH recovered by white hats redistributed from the DAO treasury, and 34.7 million CRV tokens for unrecovered portions, vested over time. The protocol continued to operate throughout the crisis period, maintaining on-chain functionality even during the May 2025 DNS hijack incident, during which Curve processed over $400 million in on-chain volume while the frontend was inaccessible. In May 2025, Curve's X (formerly Twitter) account was compromised on May 5 to promote a fraudulent CRV airdrop, and on May 12 the curve.fi domain was hijacked at the DNS registrar level, redirecting visitors to a phishing site. Smart contracts were not affected in either incident. Curve migrated its primary domain to curve.finance following the registrar attack. The protocol has undergone multiple security audits by ChainSecurity, Quantstamp, StateMind, and MixBytes, with ChainSecurity audits continuing through at least December 2024. CRV token inflation was reduced in August 2025 to an annual rate of 5.02%, cutting approximately 22 million tokens per year in emissions pressure. TVL had recovered to approximately $2 billion by 2025.","heading":"Recovery","sources":[{"url":"https://cointelegraph.com/news/curve-finance-disburse-49-million-compensation-hack-victims","name":"","type":"other","credibility":3},{"url":"https://hackmd.io/@LlamaRisk/BJzSKHNjn","name":"","type":"other","credibility":3},{"url":"https://news.curve.finance/curve-domain-incident/","name":"","type":"other","credibility":3},{"url":"https://www.vibraniumaudits.com/post/curve-finance-faces-dual-security-breaches-x-account-compromised-and-dns-hijack","name":"","type":"other","credibility":3},{"url":"https://resources.curve.fi/risks-security/security/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Curve Finance presents a complex risk profile combining protocol-level, governance, and founder-conduct risks. The July 2023 Vyper exploit demonstrated that third-party compiler dependencies can introduce systemic vulnerabilities undetectable through standard protocol audits, a risk that is not unique to Curve but was realized at scale here. The root cause was not in Curve's own code but in a compiler bug affecting multiple versions of Vyper, underscoring the difficulty of fully auditing DeFi systems that depend on language-level infrastructure. Egorov's multi-year practice of using CRV — the protocol's own governance and incentive token — as collateral for nine-figure stablecoin loans created significant concentration risk. This model created a feedback loop in which falling CRV prices threatened liquidation, which would further suppress CRV prices, which could in turn impair liquidity on the protocol itself. This dynamic materialized in both 2023 and 2024, and triggered bad debt at multiple independent lending protocols. The informal 'gentleman's agreement' used to lock OTC buyers during the 2023 crisis was non-binding and unenforceable on-chain, contributing to renewed sell pressure when it expired in February 2024. crvUSD's stablecoin design carries additional exposure: analysts have noted overconcentration in collateral types including TUSD, which faced SEC enforcement action. The protocol has no identified regulatory action from the SEC, CFTC, or DOJ as of the date of this report. Frontier infrastructure risks persist: the May 2025 dual breach (X account and DNS registrar) showed that off-chain vectors remain exploitable, though smart contracts were unaffected. Multiple independent security audits have been conducted by reputable firms. Overall, the protocol's core AMM logic has not been directly compromised by an application-layer exploit; the July 2023 attack vector was a dependency vulnerability. However, the concentration of governance power and systemic financial risk in a single founder's leveraged position represents an ongoing structural concern for users, liquidity providers, and dependent protocols.","heading":"Risk Assessment","sources":[{"url":"https://www.coinbase.com/institutional/research-insights/research/market-intelligence/curve-finance-exploit","name":"","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/curve-finance-founder-100-million-debt-could-trigger-defi-implosion","name":"","type":"other","credibility":3},{"url":"https://research.kaiko.com/insights/curve-finance","name":"","type":"other","credibility":3},{"url":"https://resources.curve.fi/risks-security/security/","name":"","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/9de9f-curve-dao-token-crv-price-prediction-2030-2","name":"","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2019-11","event":"Michael Egorov publishes the StableSwap whitepaper, laying out the AMM formula that will become Curve Finance.","source":"","date_original":"2019-11-01"},{"date":"2020","event":"Curve Finance protocol launches on Ethereum mainnet.","source":"","date_original":"2020-01-01"},{"date":"2020-08-13","event":"CRV governance token and Curve DAO contracts deployed by anonymous community member 0xc4ad.","source":""},{"date":"2021-06","event":"Curve v2 (Cryptoswap) launches, extending the AMM to volatile asset pairs.","source":"","date_original":"2021-06-01"},{"date":"2023-07-30","event":"Multiple Curve pools exploited via Vyper compiler reentrancy vulnerability; approximately $70 million drained. CRV price drops sharply, placing Egorov's $100M+ collateralized loan positions near liquidation.","source":""},{"date":"2023-08","event":"Curve Finance offers $1.85 million bounty for identification of the attacker.","source":"","date_original":"2023-08-01"},{"date":"2023-08-07","event":"As of this date, 73% of stolen funds ($52.3 million) returned by white hat actors and the alleged attacker. Egorov has sold 106 million CRV for $42 million in OTC deals to stabilize loan positions.","source":""},{"date":"2023-08-08","event":"Alleged Alchemix attacker returns approximately $12.7 million voluntarily.","source":""},{"date":"2023-09-27","event":"Egorov deposits $35 million CRV to fully settle his Aave debt position.","source":""},{"date":"2023-12-21","event":"Curve DAO votes 94% approval to disburse $49.2 million in compensation to July hack victims.","source":""},{"date":"2024-02","event":"Informal six-month OTC lockup expires; several OTC buyers begin selling CRV on exchanges, pushing price below $0.40.","source":"","date_original":"2024-02-01"},{"date":"2024-06-13","event":"CRV price falls approximately 24–30% in two days; Egorov's entire $141 million CRV collateral position liquidated across five protocols (Inverse, UwU Lend, Fraxlend, LlamaLend, Aave), generating over $10 million in bad debt on Curve Lend.","source":""},{"date":"2024-06-14","event":"Egorov sells 30 million CRV for $6 million USDT to clear LlamaLend bad debt; states all bad debt fully repaid.","source":""},{"date":"2024-12-19","event":"Third liquidation event: CRV slump triggers renewed liquidation of Egorov positions, per CoinDesk reporting.","source":""},{"date":"2025-05-05","event":"Curve Finance official X account compromised; attacker promotes fraudulent CRV airdrop phishing campaign.","source":""},{"date":"2025-05-12","event":"curve.fi primary domain hijacked at DNS registrar level; visitors redirected to phishing site. Smart contracts unaffected. Protocol processes over $400 million in on-chain volume during outage.","source":""},{"date":"2025-08","event":"Curve reduces annual CRV inflation rate to 5.02%, cutting approximately 22 million tokens per year in emissions.","source":"","date_original":"2025-08-01"}],"sources_used":[{"url":"https://www.gemini.com/cryptopedia/curve-finance-liquidity-provider-dao","name":"","type":"other","archive_url":"http://web.archive.org/web/20251122111504/https://www.gemini.com/cryptopedia/curve-finance-liquidity-provider-dao","credibility":3,"archive_timestamp":"2025-11-22T11:15:04+00:00"},{"url":"https://defillama.com/protocol/curve-finance","name":"","type":"other","archive_url":"http://web.archive.org/web/20251201022403/https://defillama.com/protocol/curve-finance","credibility":3,"archive_timestamp":"2025-12-01T02:24:03+00:00"},{"url":"https://coinbureau.com/review/curve-finance-crv","name":"","type":"other","archive_url":"http://web.archive.org/web/20260311134612/https://coinbureau.com/review/curve-finance-crv","credibility":3,"archive_timestamp":"2026-03-11T13:46:12+00:00"},{"url":"https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260508084821/https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/","credibility":3,"archive_timestamp":"2026-05-08T08:48:21+00:00"},{"url":"https://blockworks.co/news/curve-suffers-exploit","name":"","type":"other","archive_url":"http://web.archive.org/web/20260217213953/https://blockworks.co/news/curve-suffers-exploit","credibility":3,"archive_timestamp":"2026-02-17T21:39:53+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-vyper-bug-hack-july-2023","name":"","type":"other","archive_url":"http://web.archive.org/web/20260516234919/https://www.halborn.com/blog/post/explained-the-vyper-bug-hack-july-2023","credibility":3,"archive_timestamp":"2026-05-16T23:49:19+00:00"},{"url":"https://cointelegraph.com/news/curve-vyper-exploit-whole-story-so-far","name":"","type":"other","archive_url":"http://web.archive.org/web/20260829130459/https://cointelegraph.com/news/curve-vyper-exploit-whole-story-so-far","credibility":3,"archive_timestamp":"2026-08-29T13:04:59+00:00"},{"url":"https://cointelegraph.com/news/curve-finance-disburse-49-million-compensation-hack-victims","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://techcrunch.com/2023/08/01/curve-finances-62m-exploit-exposes-larger-issues-for-defi-ecosystem/","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829120148/https://techcrunch.com/2023/08/01/curve-finances-62m-exploit-exposes-larger-issues-for-defi-ecosystem/","credibility":3,"archive_timestamp":"2026-08-29T12:01:48+00:00"},{"url":"https://www.coindesk.com/markets/2023/07/31/a-curve-founders-168m-stash-is-under-stress-creating-a-risk-for-defi-as-a-whole","name":"","type":"other","archive_url":"http://web.archive.org/web/20260725154416/https://www.coindesk.com/markets/2023/07/31/a-curve-founders-168m-stash-is-under-stress-creating-a-risk-for-defi-as-a-whole","credibility":3,"archive_timestamp":"2026-07-25T15:44:16+00:00"},{"url":"https://www.theblock.co/post/243183/michael-egorov-has-sold-a-total-of-106-million-crv-for-42-million","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coindesk.com/business/2023/08/03/curve-founder-still-owes-80m-despite-raising-nearly-30m-in-past-two-days","name":"","type":"other","archive_url":"http://web.archive.org/web/20250831082501/https://www.coindesk.com/business/2023/08/03/curve-founder-still-owes-80m-despite-raising-nearly-30m-in-past-two-days","credibility":3,"archive_timestamp":"2025-08-31T08:25:01+00:00"},{"url":"https://protos.com/curve-finance-gentlemans-agreement-expires-counterparties-dump-crv/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260606140249/https://protos.com/curve-finance-gentlemans-agreement-expires-counterparties-dump-crv/","credibility":3,"archive_timestamp":"2026-06-06T14:02:49+00:00"},{"url":"https://decrypt.co/235149/curve-founder-liquidation-crv-token","name":"","type":"other","archive_url":"http://web.archive.org/web/20260512042124/https://decrypt.co/235149/curve-founder-liquidation-crv-token","credibility":3,"archive_timestamp":"2026-05-12T04:21:24+00:00"},{"url":"https://thedefiant.io/news/defi/curve-finance-founder-michael-egorov-suffers-massive-liquidations","name":"","type":"other","archive_url":"http://web.archive.org/web/20260409185336/https://thedefiant.io/news/defi/curve-finance-founder-michael-egorov-suffers-massive-liquidations","credibility":3,"archive_timestamp":"2026-04-09T18:53:36+00:00"},{"url":"https://cointelegraph.com/news/curve-finance-michael-egorov-bad-debt-llamma","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829130354/https://cointelegraph.com/news/curve-finance-michael-egorov-bad-debt-llamma","credibility":3,"archive_timestamp":"2026-08-29T13:03:54+00:00"},{"url":"https://www.coindesk.com/business/2024/12/19/founder-of-de-fi-giant-curve-gets-liquidated-again-as-crv-slumps","name":"","type":"other","archive_url":"http://web.archive.org/web/20250917190616/https://www.coindesk.com/business/2024/12/19/founder-of-de-fi-giant-curve-gets-liquidated-again-as-crv-slumps","credibility":3,"archive_timestamp":"2025-09-17T19:06:16+00:00"},{"url":"https://hackmd.io/@LlamaRisk/BJzSKHNjn","name":"","type":"other","archive_url":"http://web.archive.org/web/20260714094017/https://hackmd.io/@LlamaRisk/BJzSKHNjn","credibility":3,"archive_timestamp":"2026-07-14T09:40:17+00:00"},{"url":"https://news.curve.finance/curve-domain-incident/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260315172115/https://news.curve.finance/curve-domain-incident/","credibility":3,"archive_timestamp":"2026-03-15T17:21:15+00:00"},{"url":"https://www.vibraniumaudits.com/post/curve-finance-faces-dual-security-breaches-x-account-compromised-and-dns-hijack","name":"","type":"other","archive_url":"http://web.archive.org/web/20260519185417/https://vibraniumaudits.com/post/curve-finance-faces-dual-security-breaches-x-account-compromised-and-dns-hijack","credibility":3,"archive_timestamp":"2026-05-19T18:54:17+00:00"},{"url":"https://resources.curve.fi/risks-security/security/","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coinbase.com/institutional/research-insights/research/market-intelligence/curve-finance-exploit","name":"","type":"other","archive_url":"http://web.archive.org/web/20250928110129/https://www.coinbase.com/institutional/research-insights/research/market-intelligence/curve-finance-exploit","credibility":3,"archive_timestamp":"2025-09-28T11:01:29+00:00"},{"url":"https://cointelegraph.com/news/curve-finance-founder-100-million-debt-could-trigger-defi-implosion","name":"","type":"other","archive_url":"http://web.archive.org/web/20260829130436/https://cointelegraph.com/news/curve-finance-founder-100-million-debt-could-trigger-defi-implosion","credibility":3,"archive_timestamp":"2026-08-29T13:04:36+00:00"},{"url":"https://research.kaiko.com/insights/curve-finance","name":"","type":"other","archive_url":"http://web.archive.org/web/20260124150742/https://research.kaiko.com/insights/curve-finance","credibility":3,"archive_timestamp":"2026-01-24T15:07:42+00:00"},{"url":"https://cryptorank.io/news/feed/9de9f-curve-dao-token-crv-price-prediction-2030-2","name":"","type":"other","archive_url":"https://web.archive.org/web/20260829183240/https://cryptorank.io/news/feed/9de9f-curve-dao-token-crv-price-prediction-2030-2","credibility":3,"archive_timestamp":"2026-08-29T18:32:40+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:48.374866+00:00","updated_at":"2026-08-30T20:30:08.766263+00:00"}}