An exploit in the Curve Finance platform has put more than $100 million in cryptocurrency at risk, intensifying security concerns in Ethereum’s decentralized finance (DeFi) ecosystem.
Central to this exploit is a „re-entrancy” bug in Vyper, the programming language instrumental to Curve’s system. This vulnerability has provided hackers with an avenue to drain several stablecoin pools on the platform, unsettling the pricing and liquidity of numerous DeFi services.
While it’s uncertain how much has been drained due to the attack, BlockSec, a blockchain auditing firm, projects the total losses to be above $42 million.
Curve hosts 232 different pools. Despite this number, only those using Vyper versions 0.2.15, 0.2.16, and 0.3.0 have been identified as at risk, according to Mimaklas, a member of the Curve team. Mimaklas added:
„all affected pools have been drained or white hacked, and the team is assessing the situation with affected teams.”
Echoes of Past DeFi Attacks
This incident isn’t
We współpracy z: https://cryptodaily.co.uk/2023/07/re-entrancy-exploit-hits-curve-finance