On 2024-11-19, Curve Finance suffered a price impact amm incident resulting in approximately $660,738 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: unknown. This is a demonstration entry — not a real incident.
On 2024-10-03, Curve Finance suffered a phishing drainer incident resulting in approximately $755,738 in losses. The exploit targeted the human_op layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.
Matches the flash loan governance predicate
Matches the phishing drainer predicate
Matches the price impact amm predicate
Matches the frontend dns hijack predicate
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the governance proposal malicious predicate
kms_provider = unknownfrontend_host = vercelsubsector_tags = consumer_app, infra_tooling, general_defimethod_b_root_causes = price_impact_ammkms_provider = unknownsubsector_tags = general_defi, infra_tooling, consumer_appmethod_b_root_causes = flash_loan_governance, price_impact_ammsubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = price_impact_ammstablecoin_dependencies = USDC, USDT, DAIfrontend_host = vercelsubsector_tags = consumer_app, general_defi, infra_toolingmethod_b_root_causes = price_impact_amm, phishing_drainerstablecoin_dependencies = USDC, USDTfrontend_host = vercelsubsector_tags = infra_tooling, general_defimethod_b_root_causes = flash_loan_governance, phishing_drainerfrontend_host = vercelsubsector_tags = general_defi, consumer_appmethod_b_root_causes = flash_loan_governancekms_provider = unknownfrontend_host = vercelsubsector_tags = general_defi, consumer_app, infra_toolingmethod_b_root_causes = dvn_collapsekms_provider = unknownfrontend_host = vercelsubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = dvn_collapsekms_provider = unknownfrontend_host = vercelsubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = dvn_collapsekms_provider = unknownsubsector_tags = general_defi, consumer_appmethod_b_root_causes = frontend_dns_hijack, supply_chain_npm