Just-In: Curve Finance Says it Will Refund Affected Users in Post-Hack Update

Curve Finance has shared a post-hack update as it says investigations are ungoing and it plans to refund affected users
By Godfrey Benjamin

Based on a recent update, Decentralized Finance (DeFi) stablecoin lending platform Curve Finance has confirmed plans to refund affected users in the recent hack which led to the loss of $62 million from the protocol. 

According to Curve Finance, investigations are still ongoing but so far about 79% of the funds have been recovered. Adding that in the meantime, it is focused on “working on measuring the respective shares of each affected user with the goal of proper distribution.”

Advertisement
Advertisement

The Melodramatic Curve Finance Hack

The crypto lender was hacked on July 30 by bad actors who took advantage of certain vulnerabilities in the release history of its Vyper compiler. 

Precisely, the perpetrator of the hack focused on versions 0.2.15 to 0.3.0 of the Vyper compiler. It seemed like the hacker knew exactly where the flaws were on Vyper’s past releases. Spotting such vulnerabilities could have only taken a high level of expertise and resources as experts pointed out.

Notably, there have been speculations that the operation was well thought-out before execution. One contributor to Vyper is confident that the plan took the hackers some weeks, if not months to come up with. Some of the impacted pools are CRV/ETH, alETH/ETH, msETH/ETH, and pETH/ETH. It is also believed that the tri-crypto pool on Arbitrum might also be affected. 

Sadly, the attack sent shockwaves through the entire DeFi ecosystem. A broad look at the exploit demonstrated the lack of incentivization for uncovering bugs in past software releases as a challenge for the nascent crypto industry. 

Advertisement
Advertisement

Hacker Takes Bounty and Initiates Partial Refund

A 10% bounty reward was promised to the hacker who accepted the offer. A few days later, the hacker behind the attack initiated the process of returning the funds. 

Etherscan data confirmed that the hacker had performed three separate transactions to the Alchemix Finance developer wallet, transferring a total of 4,821 Ethereum (ETH) worth $8,891,578 at the time. Till now, the hacker has not completed the refund.

The hacker’s choice to return the funds to Alchemix Finance instead of directly to Curve Finance is perceived as a level of discretion or a strategic decision to prevent him from being caught.

Advertisement
Godfrey Benjamin
Benjamin Godfrey is a blockchain enthusiast and journalists who relish writing about the real life applications of blockchain technology and innovations to drive general acceptance and worldwide integration of the emerging technology. His desires to educate people about cryptocurrencies inspires his contributions to renowned blockchain based media and sites. Benjamin Godfrey is a lover of sports and agriculture. Follow him on X, Linkedin
Why trust CoinGape: CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights to our readers. Our journalists and analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
Investment disclaimer: The content reflects the author’s personal views and current market conditions. Please conduct your own research before investing in cryptocurrencies, as neither the author nor the publication is responsible for any financial losses.
Ad Disclosure: This site may feature sponsored content and affiliate links. All advertisements are clearly labeled, and ad partners have no influence over our editorial content.