Curve Finance DeFi Exchange Hacked, Losses Estimated to Be Over $40 Million

The total value of assets locked on Curve Finance retreated to about $1.7 billion on Monday.

By Muyao Shen and Sunil Jagtiani, Bloomberg | Updated: 31 July 2023 19:24 IST

Curve Finance DeFi Exchange Hacked, Losses Estimated to Be Over $40 Million

Photo Credit: Reuters

Curve Finance is the largest decentralized exchange after Uniswap

Highlights

Curve Finance’s CRV token has shed about 13 percent
Hack was a result of a vulnerability in a programming language
Exploiter made away with about $20 million of CRV

The native token of one of crypto's top decentralized exchanges tumbled after the platform said it had been “exploited” as a result of a vulnerability in a programming language.

Curve Finance, like other decentralized finance projects in crypto, relies on different kinds of software built on top of blockchain technology. A glitch in a particular version of Vyper — a programming language similar to Python and widely used in DeFi applications — led to the exploit, Curve tweeted Sunday.

Curve Finance's CRV token has shed about 13 percent since the problem emerged and was trading at approximately 64 US cents as of 12:50pm in Singapore on Monday, according to data compiled by Bloomberg.

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

BlockSec, which provides security audit services for crypto software, estimated the hack had already led to more than $40 million (roughly Rs. 329 crore) in losses. Tarun Chitra, chief executive officer and founder of crypto risk modeling firm Gauntlet, estimated the exploiter made away with about $20 million (roughly Rs. 164 crore) of CRV and a version of Ether.

“We are assessing the situation and will update the community as things develop,” Curve said.

The total value of assets locked on Curve Finance — the largest decentralized exchange after Uniswap — retreated to about $1.7 billion (roughly Rs. 13,987 crore) on Monday from more than $3 billion on Sunday, according to data provider DeFiLlama.

DeFi Services Being Used for Illicit Transfers, Warns US Treasury Department

Curve's founder Michael Egorov did not immediately respond to a request for comment.

CRV is used as collateral on a decentralized lending service known as Aave. Gauntlet's Chitra said that so far there were no signs of “bad loans” on the Aave platform due to the slide in CRV. Aave's token has declined about 4 percent in the past 24 hours, CoinGecko figures show.

Digital assets like Bitcoin and Ether wobbled a tad on concerns about wider potential knock-on effects but later stabilized. Bitcoin was little changed at about $29,400 (roughly Rs 24.18 lakh), while Ether was steady at $1,865 (roughly Rs. 1.53 lakh).

Hackers pilfered a record $3.8 billion (roughly Rs. 31,266 crore) worth of crypto in 2022 and Curve Finance was among the long list of organizations impacted.

The pace of incidents has cooled but the risk of security breaches still clouds decentralized finance, or DeFi, where people rely on blockchain-based software known as smart contracts to undertake activities like trading or lending.

Will crypto tax hurt the industry in India? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.