Verify a decision

{"actor":"system:backfill","investigation_id":"b20a5ebe-152f-4198-9df6-0987e1950faf","kind":"publish","page_slug":"curve-llamalend","published_at":"2026-05-29T02:41:16.120Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Curve LlamaLend","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://resources.curve.finance/lending/overview/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/curve-llamalend","type":"other","url":""},{"credibility":3,"name":"https://docs.curve.finance/lending/overview/","type":"other","url":""},{"credibility":3,"name":"https://mixbytes.io/blog/modern-defi-lending-protocols-how-its-made-curve-llamalend","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2024/06/13/crv-slides-30-as-loans-tied-to-curves-founder-face-liquidation-risk","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/curve-ceo-clarifies-uwu-hack-misinformation","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/curve-finance-founder-michael-egorov-suffers-massive-liquidations","type":"other","url":""},{"credibility":3,"name":"https://protos.com/curve-finance-founder-michael-egorov-hit-amid-22m-crv-liquidation-cascade/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/232464/curve-finance-ceo-michael-egorov-wife-mansions-australia","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/27/fact-check-did-michael-egorov-pull-100m-from-crv-to-buy-mansions-and-leave-bad-debt/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/curve-finance-investigates-sdola-llamalend-attack-as-oracle-design-and-collateral-mechanics-come-under-scrutiny/","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/curve-finance-investigates-sdola-llamalend-attack-as-oracle-design-and-collateral-mechanics-come-under-scrutiny/","type":"other","url":""},{"credibility":3,"name":"https://x.com/CurveFinance/status/2028427216401342496","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/curve-investigates-attack-on-sdola-llamalend-market-63826","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/840010","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/crv-price-llamalend-exploit-sentiment-support-2026/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2026/04/27/curve-founder-pitches-market-based-fix-for-usd700k-bad-debt-in-contrast-to-aave-bailout","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/curves-new-bad-debt-pools-turn-losses-into-tradable-claims/","type":"other","url":""},{"credibility":3,"name":"https://blockonomi.com/curve-finance-launches-recovery-path-for-affected-crv-long-llamalend-market-lenders/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/398958/better-than-bailouts-curve-founder-proposes-market-based-bad-debt-recovery-model-for-defi-lending-amid-kelpdao-fallout","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019dcc94-42ea-752e-9aab-1c988b2be01f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/05/28/stake-dao-assures-users-after-vsdcrv-exploit-and-bridge-shutdown/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/402719/security-researchers-flag-ongoing-stakedao-exploit-vsdcrv","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/stake-dao-exploit-vsdcrv-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/stake-dao-exploit-update-key-products-unaffected-bridge-closed/","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2026/05/27/arbitrum-based-stakedao-contract-hit-by-5-4t-vsdcrv-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.chainalysis.com/blog/curve-finance-liquidity-pool-hack/","type":"other","url":""},{"credibility":3,"name":"https://techcrunch.com/2023/08/01/curve-finances-62m-exploit-exposes-larger-issues-for-defi-ecosystem/","type":"other","url":""},{"credibility":3,"name":"https://blockworks.com/news/curve-suffers-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-vyper-bug-hack-july-2023","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/curve-finance-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://resources.curve.finance/risks-security/risks/lending/","type":"other","url":""},{"credibility":3,"name":"https://www.llamarisk.com/research/curve-lending","type":"other","url":""},{"credibility":3,"name":"https://llamarisk.com/research/defi-money-risk-parameterization","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/analysis/crypto/curve-llamallend-founder-innovation/","type":"other","url":""},{"credibility":3,"name":"https://resources.curve.finance/crvusd/loan-concepts/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2120482","type":"other","url":""},{"credibility":3,"name":"https://docs.curve.finance/assets/pdf/audits/ChainSecurity_Curve_Curve_Stablecoin_audit_250221.pdf","type":"other","url":""},{"credibility":3,"name":"https://www.chainsecurity.com/security-audit/curve-stablecoin","type":"other","url":""},{"credibility":3,"name":"https://resources.curve.finance/risks-security/risks/lending/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2024/06/13/crv-slides-30-as-loans-tied-to-curves-founder-face-liquidation-risk","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/michael-egorov-promises-to-develop-curve-amid-accusations-of-elaborate-cash-out","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/232464/curve-finance-ceo-michael-egorov-wife-mansions-australia","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/27/fact-check-did-michael-egorov-pull-100m-from-crv-to-buy-mansions-and-leave-bad-debt/","type":"other","url":""},{"credibility":3,"name":"https://fintelegram.com/curve-ceo-michael-egorov-and-his-lavish-australian-villas/","type":"other","url":""}]}],"sources_used":[],"summary":"Curve LlamaLend (also referred to as the crvUSD lending markets) is a decentralized, permissionless isolated lending protocol built by Curve Finance that allows users to borrow crvUSD against crypto collateral using the LLAMMA soft-liquidation mechanism. The protocol has experienced multiple distinct incidents since launch: a $10 million bad-debt event in June 2024 tied to the founder's oversized leveraged positions, an oracle-manipulation attack on the sDOLA market in March 2026 resulting in approximately $240,000 in borrower losses, an October 2025 market crash that left the CRV-long vault approximately $700,000 underbacked, and a May 2026 third-party exploit (Stake DAO) that forced the sunsetting of an associated Arbitrum LlamaLend market. The protocol's core contracts have not been directly compromised by a code-level hack, but recurring bad-debt events, oracle design flaws in permissionlessly created markets, and governance concentration risks have drawn sustained scrutiny including a flag from on-chain investigator ZachXBT.","timeline":[{"date":"2023-07-30","event":"Curve Finance liquidity pools exploited via Vyper compiler reentrancy bug (versions 0.2.15, 0.2.16, 0.3.0); initial losses estimated at ~$70M, ultimately ~$52M after white-hat recoveries. LlamaLend not yet deployed.","source":""},{"date":"2024-04-13","event":"Statemind releases pre-launch audit of LlamaLend, identifying 1 Critical, 1 High, and 4 Medium vulnerabilities — all reportedly remediated before deployment.","source":""},{"date":"2024-06-13","event":"CRV drops ~28–30% following the UwU Lend exploit. Curve founder Michael Egorov's $95.7M in stablecoin debt backed by ~47% of CRV supply is liquidated across five platforms. LlamaLend CRV market accrues $10M in bad debt.","source":""},{"date":"2024-06-15","event":"Michael Egorov announces full repayment of the $10M LlamaLend bad debt, funded in part by a $6M USDT sale of 30M CRV to NextGen Venture Partners.","source":""},{"date":"2024-12-19","event":"Egorov liquidated again for 918,830 CRV (~$882,000) as CRV falls more than 12% in 24 hours, per CoinDesk reporting.","source":""},{"date":"2025-10-10","event":"Broad market crash — attributed in part to tariff announcement — triggers $19B in global leveraged liquidations. LlamaLend CRV-long market accrues approximately $700,000 in bad debt as gas spikes prevent timely liquidations; lender vault drops to ~70% solvency.","source":""},{"date":"2026-03-02","event":"sDOLA–crvUSD LlamaLend market exploited via flash-loan oracle manipulation attack. Attacker profits ~$240,000; borrowers in the market are liquidated; lenders unaffected. Curve Finance confirms investigation on X.","source":""},{"date":"2026-04-27","event":"Michael Egorov proposes permissionless market-based bad-debt recovery pool for the October 2025 CRV-long LlamaLend bad debt, centered at 71% solvency, as an alternative to bailout mechanisms.","source":""},{"date":"2026-05-27","event":"Stake DAO exploited on Arbitrum; attacker mints 5.4 trillion vsdCRV via compromised deployer key. Actual losses limited to ~$91,000. The Arbitrum asdCRV LlamaLend market is sunset; crvUSD depositors directed to migrate.","source":""}]},"v":1}