{"id":56463,"date":"2023-08-11T13:57:26","date_gmt":"2023-08-11T17:57:26","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=56463"},"modified":"2023-08-11T13:57:28","modified_gmt":"2023-08-11T17:57:28","slug":"post-hack-update-curve-finance-to-refund-affected-users","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/post-hack-update-curve-finance-to-refund-affected-users\/","title":{"rendered":"Post-Hack Update: Curve Finance to Refund Affected Users"},"content":{"rendered":"\n<p>Curve Finance has provided a <a href=\"https:\/\/coinscreed.com\/staging\/lazarus-group-allegedly-behind-60m-alphapo-hack-zachxbt.html\" target=\"_blank\" rel=\"noreferrer noopener\">post-hack update,<\/a> stating that investigations are ongoing and intends to reimburse affected customers.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-1024x683.jpg\" alt=\"\" class=\"wp-image-56470\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-1024x683.jpg 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-300x200.jpg 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-768x512.jpg 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-750x500.jpg 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack-1140x760.jpg 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack.jpg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Post-Hack Update: Curve Finance to Refund Affected Users<\/figcaption><\/figure>\n\n\n\n<p>Curve Finance, a Decentralized Finance (DeFi) <a href=\"https:\/\/coinscreed.com\/staging\/paypal-stablecoin-debut-initiates-surge-in-fake-pyusd-tokens.html\" target=\"_blank\" rel=\"noreferrer noopener\">stablecoin<\/a> lending platform, has affirmed in a recent update that it intends to reimburse users affected by the recent hack that resulted in the loss of $62 million from the protocol.<\/p>\n\n\n\n<p>Curve Finance reports that investigations are ongoing, but approximately 79% of the funds have been recovered. In the interim, the company focuses on assessing each affected user's respective shares to ensure equitable distribution.<\/p>\n\n\n\n<blockquote class=\"twitter-tweet\"><p lang=\"en\" dir=\"ltr\">Quick post-hack update.<br><br>While 70% of funds affected by the hack last week are recovered, active investigation with regards to the rest is underway.<br><br>In the meantime, we are also working on measuring the respective shares of each affected user with the goal of proper distribution<\/p>&mdash; Curve Finance (@CurveFinance) <a href=\"https:\/\/twitter.com\/CurveFinance\/status\/1689995852411027456?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">August 11, 2023<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a><\/blockquote> \n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-the-dramatic-curve-financial-scam\">The Dramatic Curve Financial Scam<\/h2>\n\n\n\n<p>The crypto lender was compromised on July 30 by malicious actors who exploited vulnerabilities in the compiler's release history. Exact versions 0.2.15 to 0.3.0 of the Vyper compiler were targeted by the hacker. <\/p>\n\n\n\n<p>The intruder appeared to know precisely where the vulnerabilities were in previous <a href=\"https:\/\/github.com\/vyperlang\/vyper\/releases\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Vyper releases.<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> According to specialists, identifying such vulnerabilities would have required high skill and resources.<\/p>\n\n\n\n<p>There have been rumors that the operation was meticulously planned before its execution. A Vyper contributor is confident it took the hackers weeks, if not months, to devise the plan. Several pools are affected, including CRV\/ETH, alETH\/ETH, msETH\/ETH, and pETH\/ETH. <\/p>\n\n\n\n<p>Also, it is believed that the tri-crypto pool on Arbitrum may have been affected. Unfortunately, the assault reverberated throughout the entire DeFi ecosystem. A comprehensive examination of the exploit revealed the absence of incentive for discovering bugs in previous software releases as a challenge for the nascent cryptocurrency industry.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Hacker Accepts Reward, Starts Partial Refund<\/h3>\n\n\n\n<p>A 10% bounty was offered to any hacker who accepted the offer. A few days later, the perpetrator of the attack initiated the return of the stolen funds.<\/p>\n\n\n\n<p><a href=\"https:\/\/etherscan.io\/charts\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Etherscan data<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> confirmed that the hacker had transferred 4,821 Ethereum (ETH) worth $8,891,578 in three distinct transactions to the developer wallet of Alchemix Finance. The hacker still needs to process the refund.<\/p>\n\n\n\n<p>The hacker's decision to return the stolen funds to Alchemix Finance rather than Curve Finance is interpreted as a level of discretion or a strategic move to avoid being discovered.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Curve Finance has provided a post-hack update, stating that investigations are ongoing and intends to reimburse affected customers. Curve Finance, a Decentralized Finance (DeFi) stablecoin lending platform, has affirmed in a recent update that it intends to reimburse users affected by the recent hack that resulted in the loss of $62 million from the protocol. [&hellip;]<\/p>\n","protected":false},"author":53,"featured_media":56470,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[21,73],"tags":[15512,15510,5643,5817],"class_list":["post-56463","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-defi-news","tag-curve-dao-2","tag-curve-finance-2","tag-defi-2","tag-hack-2"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2023\/08\/hack.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/56463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=56463"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/56463\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/56470"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=56463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=56463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=56463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}