Verify a decision

{"actor":"system:backfill","investigation_id":"3e4567af-0a09-4107-b598-0cddbf8e26fa","kind":"publish","page_slug":"curve-dex","published_at":"2026-05-20T18:59:00.691Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Curve DEX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.gemini.com/cryptopedia/curve-finance-liquidity-provider-dao"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/curve-finance"},{"credibility":3,"name":"","type":"other","url":"https://coinbureau.com/review/curve-finance-crv"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/"},{"credibility":3,"name":"","type":"other","url":"https://blockworks.co/news/curve-suffers-exploit"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-vyper-bug-hack-july-2023"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/curve-vyper-exploit-whole-story-so-far"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/curve-finance-disburse-49-million-compensation-hack-victims"},{"credibility":3,"name":"","type":"other","url":"https://techcrunch.com/2023/08/01/curve-finances-62m-exploit-exposes-larger-issues-for-defi-ecosystem/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/markets/2023/07/31/a-curve-founders-168m-stash-is-under-stress-creating-a-risk-for-defi-as-a-whole"},{"credibility":3,"name":"","type":"other","url":"https://www.theblock.co/post/243183/michael-egorov-has-sold-a-total-of-106-million-crv-for-42-million"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/business/2023/08/03/curve-founder-still-owes-80m-despite-raising-nearly-30m-in-past-two-days"},{"credibility":3,"name":"","type":"other","url":"https://protos.com/curve-finance-gentlemans-agreement-expires-counterparties-dump-crv/"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/235149/curve-founder-liquidation-crv-token"},{"credibility":3,"name":"","type":"other","url":"https://thedefiant.io/news/defi/curve-finance-founder-michael-egorov-suffers-massive-liquidations"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/curve-finance-michael-egorov-bad-debt-llamma"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/business/2024/12/19/founder-of-de-fi-giant-curve-gets-liquidated-again-as-crv-slumps"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/curve-finance-disburse-49-million-compensation-hack-victims"},{"credibility":3,"name":"","type":"other","url":"https://hackmd.io/@LlamaRisk/BJzSKHNjn"},{"credibility":3,"name":"","type":"other","url":"https://news.curve.finance/curve-domain-incident/"},{"credibility":3,"name":"","type":"other","url":"https://www.vibraniumaudits.com/post/curve-finance-faces-dual-security-breaches-x-account-compromised-and-dns-hijack"},{"credibility":3,"name":"","type":"other","url":"https://resources.curve.fi/risks-security/security/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.coinbase.com/institutional/research-insights/research/market-intelligence/curve-finance-exploit"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/curve-finance-founder-100-million-debt-could-trigger-defi-implosion"},{"credibility":3,"name":"","type":"other","url":"https://research.kaiko.com/insights/curve-finance"},{"credibility":3,"name":"","type":"other","url":"https://resources.curve.fi/risks-security/security/"},{"credibility":3,"name":"","type":"other","url":"https://cryptorank.io/news/feed/9de9f-curve-dao-token-crv-price-prediction-2030-2"}]}],"sources_used":[],"summary":"Curve Finance is a major decentralized exchange and automated market maker (AMM) on Ethereum, optimized for low-slippage swaps of pegged assets such as stablecoins. On July 30, 2023, several of its liquidity pools were drained of approximately $70 million due to a reentrancy vulnerability in the Vyper smart contract compiler (versions 0.2.15, 0.2.16, and 0.3.0), one of the largest DeFi exploits of 2023. Separately, founder Michael Egorov's practice of using large CRV holdings as loan collateral across multiple DeFi protocols created systemic risk that culminated in a $140 million liquidation event in June 2024, generating over $10 million in bad debt across connected protocols.","timeline":[{"date":"2019-11-01","event":"Michael Egorov publishes the StableSwap whitepaper, laying out the AMM formula that will become Curve Finance.","source":""},{"date":"2020-01-01","event":"Curve Finance protocol launches on Ethereum mainnet.","source":""},{"date":"2020-08-13","event":"CRV governance token and Curve DAO contracts deployed by anonymous community member 0xc4ad.","source":""},{"date":"2021-06-01","event":"Curve v2 (Cryptoswap) launches, extending the AMM to volatile asset pairs.","source":""},{"date":"2023-07-30","event":"Multiple Curve pools exploited via Vyper compiler reentrancy vulnerability; approximately $70 million drained. CRV price drops sharply, placing Egorov's $100M+ collateralized loan positions near liquidation.","source":""},{"date":"2023-08-01","event":"Curve Finance offers $1.85 million bounty for identification of the attacker.","source":""},{"date":"2023-08-07","event":"As of this date, 73% of stolen funds ($52.3 million) returned by white hat actors and the alleged attacker. Egorov has sold 106 million CRV for $42 million in OTC deals to stabilize loan positions.","source":""},{"date":"2023-08-08","event":"Alleged Alchemix attacker returns approximately $12.7 million voluntarily.","source":""},{"date":"2023-09-27","event":"Egorov deposits $35 million CRV to fully settle his Aave debt position.","source":""},{"date":"2023-12-21","event":"Curve DAO votes 94% approval to disburse $49.2 million in compensation to July hack victims.","source":""},{"date":"2024-02-01","event":"Informal six-month OTC lockup expires; several OTC buyers begin selling CRV on exchanges, pushing price below $0.40.","source":""},{"date":"2024-06-13","event":"CRV price falls approximately 24–30% in two days; Egorov's entire $141 million CRV collateral position liquidated across five protocols (Inverse, UwU Lend, Fraxlend, LlamaLend, Aave), generating over $10 million in bad debt on Curve Lend.","source":""},{"date":"2024-06-14","event":"Egorov sells 30 million CRV for $6 million USDT to clear LlamaLend bad debt; states all bad debt fully repaid.","source":""},{"date":"2024-12-19","event":"Third liquidation event: CRV slump triggers renewed liquidation of Egorov positions, per CoinDesk reporting.","source":""},{"date":"2025-05-05","event":"Curve Finance official X account compromised; attacker promotes fraudulent CRV airdrop phishing campaign.","source":""},{"date":"2025-05-12","event":"curve.fi primary domain hijacked at DNS registrar level; visitors redirected to phishing site. Smart contracts unaffected. Protocol processes over $400 million in on-chain volume during outage.","source":""},{"date":"2025-08-01","event":"Curve reduces annual CRV inflation rate to 5.02%, cutting approximately 22 million tokens per year in emissions.","source":""}]},"v":1}