Summary
Curve LlamaLend (also referred to as the crvUSD lending markets) is a decentralized, permissionless isolated lending protocol built by Curve Finance that allows users to borrow crvUSD against crypto collateral using the LLAMMA soft-liquidation mechanism. The protocol has experienced multiple distinct incidents since launch: a $10 million bad-debt event in June 2024 tied to the founder's oversized leveraged positions, an oracle-manipulation attack on the sDOLA market in March 2026 resulting in approximately $240,000 in borrower losses, an October 2025 market crash that left the CRV-long vault approximately $700,000 underbacked, and a May 2026 third-party exploit (Stake DAO) that forced the sunsetting of an associated Arbitrum LlamaLend market. The protocol's core contracts have not been directly compromised by a code-level hack, but recurring bad-debt events, oracle design flaws in permissionlessly created markets, and governance concentration risks have drawn sustained scrutiny including a flag from on-chain investigator ZachXBT.
Connected Entities
1 entitiesTimeline(9 events)
2023-07-30
Curve Finance liquidity pools exploited via Vyper compiler reentrancy bug (versions 0.2.15, 0.2.16, 0.3.0); initial losses estimated at ~$70M, ultimately ~$52M after white-hat recoveries. LlamaLend not yet deployed.
2024-04-13
Statemind releases pre-launch audit of LlamaLend, identifying 1 Critical, 1 High, and 4 Medium vulnerabilities — all reportedly remediated before deployment.
2024-06-13
CRV drops ~28–30% following the UwU Lend exploit. Curve founder Michael Egorov's $95.7M in stablecoin debt backed by ~47% of CRV supply is liquidated across five platforms. LlamaLend CRV market accrues $10M in bad debt.
2024-06-15
Michael Egorov announces full repayment of the $10M LlamaLend bad debt, funded in part by a $6M USDT sale of 30M CRV to NextGen Venture Partners.
2024-12-19
Egorov liquidated again for 918,830 CRV (~$882,000) as CRV falls more than 12% in 24 hours, per CoinDesk reporting.
2025-10-10
Broad market crash — attributed in part to tariff announcement — triggers $19B in global leveraged liquidations. LlamaLend CRV-long market accrues approximately $700,000 in bad debt as gas spikes prevent timely liquidations; lender vault drops to ~70% solvency.
2026-03-02
sDOLA–crvUSD LlamaLend market exploited via flash-loan oracle manipulation attack. Attacker profits ~$240,000; borrowers in the market are liquidated; lenders unaffected. Curve Finance confirms investigation on X.
2026-04-27
Michael Egorov proposes permissionless market-based bad-debt recovery pool for the October 2025 CRV-long LlamaLend bad debt, centered at 71% solvency, as an alternative to bailout mechanisms.
2026-05-27
Stake DAO exploited on Arbitrum; attacker mints 5.4 trillion vsdCRV via compromised deployer key. Actual losses limited to ~$91,000. The Arbitrum asdCRV LlamaLend market is sunset; crvUSD depositors directed to migrate.
Decision Log
- hash: 7sMAuhgrRWH8egCPyjmTvSH58T9uq9RHw4GbPjEyvBoW
- hash: 64JTukUT8ANCGr1NzU4zcWWcwBJRyB5twcfCU74icD6G
- hash: E7pSdf8VkxhLuqxTD3Uw4qg4wT5Mi4dHnqaZHkRvh2w8
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:18 AM
last updated: 6/10/2026, 12:03:12 AM
avoid.net — verified advice for a post-truth world