Curve Finance posted on Twitter that Vyper 0.3.7+ has been well refactored and audited, and while there are no guarantees (and there are none), it is best to migrate to the latest version of the contract. Previously, as of now, Curve Finance has officially confirmed that four liquidity pools are affected by Vyper compiler version 0.2.15-0.30, namely: crv/eth, aleth/eth, mseth/eth, peth/eth, and a liquidity pool of tricrypto on Arbitrum "may" be affected. Auditors and Vyper developers are still unable to find the vulnerability, so investors need to exit as soon as possible.