Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/curvefinancefakeairdropaftertwitterxcompromise.php}} {{Unattributed Sources}} Curve Finance Logo/HomepageCurve Finance is a leading DeFi platform launched in January 2020, known for its efficient stablecoin trading, low-slippage swaps via an AMM model, and rewards for liquidity providers. Its specialized bonding curves are designed for minimal price impac..."

2025-06-11T21:14:32Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/curvefinancefakeairdropaftertwitterxcompromise.php}} {{Unattributed Sources}} thumb|Curve Finance Logo/HomepageCurve Finance is a leading DeFi platform launched in January 2020, known for its efficient stablecoin trading, low-slippage swaps via an AMM model, and rewards for liquidity providers. Its specialized bonding curves are designed for minimal price impac..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/curvefinancefakeairdropaftertwitterxcompromise.php}}
{{Unattributed Sources}}

[[File:Curvefinance.jpg|thumb|Curve Finance Logo/Homepage]]Curve Finance is a leading DeFi platform launched in January 2020, known for its efficient stablecoin trading, low-slippage swaps via an AMM model, and rewards for liquidity providers. Its specialized bonding curves are designed for minimal price impact, especially in high-volume stablecoin transactions. In May 2025, Curve's X account was briefly compromised by attackers promoting a fake airdrop, but the breach was limited to the social media account, with no impact on user funds or systems. The team quickly restored access, issued a public update, and is continuing to investigate the cause while remaining fully operational.<ref name="web3isgoinggreat-20021" /><ref name="curvefinancetweetarchive-20026" /><ref name="curvefinancetweet1-20027" /><ref name="newmichwilltweet1-20028" /><ref name="newmichwilltweet2-20029" /><ref name="michaelegoroviqwiki-20030" /><ref name="curvefinancecoindesk-20031" /><ref name="returnfinanceblog-20022" /><ref name="oslcom-20023" /><ref name="coin98net-20024" /><ref name="binanceacademy-20025" /><ref name="curvefinancetweet2-20032" /><ref name="greedisgoodbruhtweet-20033" /><ref name="curvefinancetweet3-20034" />

== About Curve Finance ==
Curve Finance has established itself as a leading platform in the decentralized finance (DeFi) ecosystem, offering efficient stablecoin trading, liquidity provision opportunities, and innovative financial products.

Launched in January 2020, Curve Finance utilizes an Automated Market Maker (AMM) model, allowing users to trade directly against liquidity pools rather than relying on traditional order books. This approach minimizes price slippage, making it particularly advantageous for traders dealing with stablecoins like USDC, DAI, and USDT.

One of Curve's distinctive features is its specialized bonding curves tailored for stablecoin swaps. These curves are optimized to maintain tight price spreads, ensuring that users can execute trades with minimal price impact. This design is especially beneficial for large-volume transactions, as it reduces the potential for significant price fluctuations during trades.

In addition to its core trading functionalities, Curve Finance offers opportunities for liquidity providers to earn rewards. By supplying assets to various liquidity pools, users can earn a portion of the trading fees generated on the platform. The governance of Curve is decentralized through the Curve DAO, where holders of the CRV token can participate in decision-making processes related to the protocol's development and operations.

As of May 2023, Curve Finance introduced its native stablecoin, crvUSD, on the Ethereum mainnet. This overcollateralized stablecoin operates using a mint-and-burn mechanism, similar to other decentralized stablecoins like MakerDAO's DAI. What sets crvUSD apart is its innovative lending-liquidating algorithm, LLAMA, which continuously rebalances collateral to prevent sudden liquidations during market downturns.
== About Michael Egorov ==
Michael Egorov is a software developer and entrepreneur best known for founding Curve Finance, a decentralized exchange focused on stablecoins and launched in 2020. Before that, he was the CTO and co-founder of NuCypher, a data privacy layer using proxy re-encryption. His background includes work as a software engineer at several tech companies and as a physicist in academic institutions.

Egorov holds a Bachelor’s degree in Applied Mathematics and Physics from the Moscow Institute of Physics and Technology, where he graduated with honors. He later earned a Ph.D. in Physics from Swinburne University of Technology, specializing in quantum physics and Bose-Einstein condensates.

His interest in crypto began in 2013 while working as a postdoc. Recognizing the potential of stablecoins, he began building Curve while still at NuCypher. Initially working alone, Egorov focused on balancing decentralization, safety, and development speed, eventually establishing Curve as a leading DeFi platform built on Ethereum.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
In May 2025, Curve Finance's X account was compromised in a limited breach that did not affect user funds.
{| class="wikitable"
|+Key Event Timeline - Curve Finance Fake Airdrop After Twitter/X Compromise
!Date
!Event
!Description
|-
|May 5th, 2025 12:40:00 PM MDT
|Curve Finance Account Restored
|Curve Finance posts to announce that they are back, a statement which co-founder Michael Egorov confirms by retweeting it.
|-
|May 5th, 2025 1:05:00 PM MDT
|Michael Egorov Block Saviour
|Michael Egorov requests for anyone who was blocked by CurveFinance while the hacker controlled it to come forward. Many users report being blocked, and some report being unfollowed as well.
|-
|May 6th, 2025 3:57:00 AM MDT
|Curve Finance Shares Update
|Curve Finance shares an update. that yesterday its official X (formerly Twitter) account was compromised, but access has since been fully restored. The breach was limited strictly to the X account—no other systems were affected, no security vulnerabilities were found, and no user funds were impacted. Fortunately, there were no reports of users falling for the phishing links posted by the attacker. Curve Finance remains fully operational and continues to investigate the incident, thanking the community for its swift support and vigilance.
|}

== Technical Details ==
Attackers claimed an airdrop.

== Total Amount Lost ==
No users were reported to have fallen for the phishing links posted during the hack.

No funds were lost.

== Immediate Reactions ==
Curve Finance responded quickly and transparently to the May 2025 compromise of its official X account.

== Ultimate Outcome ==
On May 5, 2025, Curve Finance successfully regained control of its compromised X (formerly Twitter) account, with co-founder Michael Egorov confirming the restoration by retweeting the announcement. Shortly after, Egorov asked users who had been blocked by the attacker to come forward, leading many to report being blocked or unfollowed during the breach. By May 6, Curve Finance released a formal update confirming that the breach was limited solely to their X account—no internal systems were affected, no user funds were lost, and there were no known victims of the phishing links posted by the hacker. The platform remains fully operational and is continuing to investigate the incident.

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
While access has been restored and no damage to user funds or other systems occurred, the team is still working to determine how the breach happened to prevent future incidents. They’ve stated they will share further updates as needed, which may suggest the internal review is not yet complete.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="web3isgoinggreat-20021">[https://www.web3isgoinggreat.com/?id=curve-finance-website-and-twitter-account-hacked Curve Finance website and Twitter account hacked] (Accessed Jun 5, 2025)</ref>

<ref name="curvefinancetweetarchive-20026">[https://www.web3isgoinggreat.com/archive/2025-05-12-0/1 Curve Finance Archived Tweet - Web3IsGoingGreat] (Accessed Jun 5, 2025)</ref>

<ref name="curvefinancetweet1-20027">[https://twitter.com/CurveFinance/status/1919462291017195827 Curve Finance - "We are officially back. Special thanks to everyone who helped to return the account back so fast: @_SEAL_Org, @0xChar, @9gagceo, @pcaversaccio, @ChainPatrol, even @haydenzadams, and of course X support team" - Twitter/X] (Accessed Jun 5, 2025)</ref>

<ref name="newmichwilltweet1-20028">[https://twitter.com/newmichwill/status/1919468580027908567 Michael Egorov - "Anyone who appears blocked by @CurveFinance while hacker controlled it - please tell!" - Twitter/X] (Accessed Jun 5, 2025)</ref>

<ref name="newmichwilltweet2-20029">[https://twitter.com/newmichwill/status/1919462654768279570 Michael Egorov - "Now Curve X account is back for real" - Twitter/X] (Accessed Jun 5, 2025)</ref>

<ref name="michaelegoroviqwiki-20030">[https://iq.wiki/wiki/michael-egorov Michael Egorov - IQ.wiki] (Accessed Jun 5, 2025)</ref>

<ref name="curvefinancecoindesk-20031">[https://www.coindesk.com/tech/2023/05/03/curve-finance-deploys-native-stablecoin-on-mainnet Decentralized finance (DeFi) protocol Curve Finance deployed its highly anticipated native stablecoin called crvUSD on the Ethereum mainnet Wednesday afternoon. - CoinDesk] (Accessed Jun 5, 2025)</ref>

<ref name="returnfinanceblog-20022">[https://return.finance/blog/what-is-curve/ Understanding Curve Finance: Earn, Trade, and Farm with DeFi - Return Finance Blog] (Accessed Jun 5, 2025)</ref>

<ref name="oslcom-20023">[https://www.osl.com/hk-en/academy/article/what-is-curve-finance What Is Curve Finance? - OSL Academy] (Accessed Jun 5, 2025)</ref>

<ref name="coin98net-20024">[https://coin98.net/how-to-use-curve-finance How To Use Curve Finance: A Step By Step Guide - Coin98] (Accessed Jun 5, 2025)</ref>

<ref name="binanceacademy-20025">[https://academy.binance.com/en/articles/what-is-curve-finance-in-defi What Is Curve Finance in DeFi? - Binance Academy] (Accessed Jun 5, 2025)</ref>

<ref name="curvefinancetweet2-20032">[https://twitter.com/CurveFinance/status/1919482147896725835 Curve Finance - "Not really: unclear how account access could be taken. No sign of any client-side compromise" - Twitter/X] (Accessed Jun 5, 2025)</ref>

<ref name="greedisgoodbruhtweet-20033">[https://twitter.com/greedisgoodbruh/status/1919462830316679292 greedisgood - Interaction Claiming Not Hacked - Twitter/X] (Accessed Jun 5, 2025)</ref>

<ref name="curvefinancetweet3-20034">[https://twitter.com/CurveFinance/status/1919692884011331711 Curve Finance - "the incident was limited strictly to the X account. No other Curve accounts were affected. No security issues were found on our side, no user funds were impacted, no victims of phishing links which the hacker posted. All Curve systems remain fully operational." - Twitter/X] (Accessed Jun 5, 2025)</ref></references>

Curve Finance Fake Airdrop After Twitter/X Compromise - Revision history