Metronome

Shift

Alchemix

Burn

DeFi

A security researcher recently received a $250,000 reward for uncovering a critical vulnerability in the <a href="https://curve.fi/" data-wpel-link="external" target="_blank" rel="noopener noreferrer nofollow">Curve Finance</a> decentralized finance (DeFi) protocol.
This flaw had previously enabled cybercriminals to steal millions from various cryptocurrency systems.
The vulnerability, identified by Marco Croc, a cybersecurity expert from Kupia Security, involved a reentrancy issue that could have been exploited to tamper with balances and withdraw unauthorized funds from liquidity pools.
Marco Croc detailed his findings in a series of posts on X, explaining the potential risks and manipulations possible due to the bug.
Curve Finance swiftly responded to the disclosure, conducting a comprehensive investigation into the matter.
They acknowledged the significant threat posed by the vulnerability and consequently awarded Marco Croc the highest possible bounty of $250,000 for his critical input.
“Curve Finance recognized the severity of the vulnerability,” Marco Croc said, highlighting the importance of the protocol’s quick action.
Despite the protocol’s assessment that the vulnerability was “not as dangerous,” with confidence in their ability to recover any potentially stolen funds, Curve Finance admitted that the occurrence of such a security incident could have led to widespread panic within the community.
READ MORE: <a href="https://www.cryptointelligence.co.uk/top-shib-holders-revealed-burn-address-dominates-whales-shift-billions-and-shibarium-upgrade-looms/" data-wpel-link="internal" rel="noopener noreferrer nofollow">Top SHIB Holders Revealed: Burn Address Dominates, Whales Shift Billions, and Shibarium Upgrade Looms</a>
This acknowledgment comes in the wake of Curve Finance’s recovery from a massive $62 million hack in July.
In an effort to mitigate the impact on their users, Curve Finance and its community took significant steps towards compensation.
The protocol decided to reimburse $49.2 million worth of assets to affected liquidity providers (LPs).
This decision was backed by an overwhelming majority of tokenholders, with 94% approving the disbursement to cover losses across several pools including Curve, JPEG’d (JPEG), Alchemix (ALCX), and Metronome (MET).
The compensation proposal detailed the amounts to be recovered and redistributed: “The overall ETH to recover was calculated as 5919.2226 ETH, the CRV to recover was calculated as 34,733,171.51 CRV and the total to distribute was calculated as 55’544’782.73 CRV.”
The attacker had exploited a bug in certain versions of the Vyper programming language, which rendered versions 0.2.15, 0.2.16, and 0.3.0 susceptible to reentrancy attacks.
This incident underlines the persistent threats in the DeFi space and the continuous need for rigorous security measures.
To submit a <a href="https://www.cryptointelligence.co.uk/category/press-releases/" data-wpel-link="internal" rel="noopener noreferrer nofollow">crypto press release (PR)</a>, send an email to <a href="mailto:sales@cryptointelligence.co.uk" rel="noopener noreferrer nofollow">sales@cryptointelligence.co.uk</a>.

Security Expert Awarded $250,000 for Uncovering Major Flaw in DeFi Protocol Curve Finance

Crypto Intelligence

Other articles published on May 2, 2024

May’s Crucial Bitcoin (BTC) Events: Potential Catalysts for Cryptocurrency Market Shifts

Patrick Gruhn Acquires Titanic’s Costliest Artifact

4 New Cryptocurrencies To Invest in May 2024

U.S. Bitcoin ETF Outflows Jump Past $560 Million, More Pain Ahead?

Optimism, Arbitrum, and Polygon: Here’s a look at the state of L2s

DeFi Leaders Ethereum and Solana Lag Behind: Algotech Presale Takes Spotlight With $4.2M Raised W...

Join our free newsletter for daily crypto updates!