Vyper vulnerabilities led to $47 million in losses in DeFi projects.
Curve Finance drained 32 million CRV tokens.
The Front-running MEV bot worsened losses for the JPEG’d project during the attack.
In a devastating blow to the decentralized finance (DeFi) ecosystem, several projects utilizing Vyper— an alternative programming language for Ethereum smart contracts, suffered significant losses, with attackers making off with over $47 million. The incidents occurred on July 30, targeting stable pools on Curve Finance, an automated market maker platform.
The vulnerabilities were rooted in Vyper’s 0.2.15, 0.2.16, and 0.3.0 versions, specifically related to malfunctioning reentrancy locks. Among the affected projects were decentralized exchange Ellipsis, Alchemix’s alETH-ETH, JPEG’d’s pETH-ETH pool, and Metronome’s sETH-ETH pool. Curve Finance’s swap pool also saw the draining of 32 million CRV tokens, valued at over $22 million, a fact confirmed by Curve Finance CEO Michael
We współpracy z: https://thenewscrypto.com/curve-finance-exploit-defi-projects-lose-47m/
