๐จ Curve Finance, a major DeFi player, faced a $24M exploit on its stable pools due to a vulnerability in Vyper compiler versions. The attacker used "malfunctioning reentrancy locks" to drain funds, affecting several other DeFi projects. ๐ฑ
Vyper acknowledged the issue and urged affected projects to reach out. White hat hackers initiated a rescue operation, and Curve Finance confirmed crvUSD contracts & associated pools were unaffected. However, CRV token dropped 5%. ๐
Surprisingly, the hacker returned 2,879 ETH ($5.4M) to the protocol deployer address. Still, Curve Finance's TVL fell 43% from $3.26B to $1.87B. ๐๐ฐ