$0 USD

MARCH 2021

GLOBAL

CURVE FINANCE

DESCRIPTION OF EVENTS

"Curve is a decentralized, UniSwap-like exchange for stablecoins. By focusing on stablecoins, it’s able to offer traders extremely low slippage, and liquidity providers enjoy little-to-no impermanent loss." "As is the case with many other decentralized finance protocols, Curve wasn’t fully decentralized at launch, run by the Curve team, led by Michael Egorov, the founder of NuCypher with a Ph.D. in Physics."

 

"Curve supports DAI, USDC, USDT, TUSD, BUSD and sUSD, as well as BTC pairs, and it lets you trade between these pairs extremely quickly and efficiently. When stablecoins or stable assets are involved, Curve’s prices are usually the best in the business."

 

“The key aspect of Curve is its market-making algorithm, which can provide 100-1000 times higher market depth than Uniswap or Balancer for the same total value locked. This dynamic helps both traders and liquidity providers because fundamental returns for those are higher than on Uniswap and alike by the same factor as the market depth.”

 

"Curve’s stablecoin swapping mechanism and yield integration mechanism has been audited by Trail of Bits."

 

"Curve Finance tweeted that a vulnerability was found in the Pool Factory v1 version of the fund pool, and it is recommended that v1 users use crv.finance to withdraw funds immediately. Curve.fi and Pool Factory v2 fund pools do not respond. But it only affects the v1 pool, and hackers cannot use it to steal user funds."

 

"Our deprecated pool factory v1 at http://crv.finance is affected by a recently discovered bug. Anyone in v1 factory pools - immediately withdraw funds using http://crv.finance. Pools on http://Curve.fi and v2 factory pools are unaffected and funds are safe."

 

"Whilst the bug is critical, it cannot be exploited to steal users' funds. A full post mortem will be issued after most liquidity is removed. Again, it only affects factory v1 pools."

Curve Finance requested users to withdraw their funds from the V1 pool. They promised to release a port-mortem of the issue, however do not appear to have done so.

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2021 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.