Incident All ledgers
Curve DEX: $61.7m
Curve DEX lost $61.7m on 30 July 2023. Ranked 60th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 30 July 2023
- Lost
- $61.7m
- Returned or repaid
- None recorded
- Target
- DeFi Protocol
- Category
- Reentrancy
- Method
- Vyper Compiler Bug
- Chains
- Ethereum
On July 30, 2023, attackers drained about $61.7M from several Curve Finance pools, including pETH-ETH, alETH-ETH and msETH-ETH, by abusing a flaw in reentrancy guards from certain Vyper compiler versions. Roughly 68% of the funds were later recovered.
Against the ledger
- It ranks 60th of the 1,272 incidents with a known loss, and 8th in 2023.
- It accounts for 20.3% of the $304.1m in known losses in July 2023.
- 61 incidents in the ledger are classified as Reentrancy, for $458.1m in total. This one is 13.5% of that.
- The ledger records no returned funds.
Other incidents named Curve
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 07 Nov 2023 | Curve Finance MEV Bot | $2.0m | DeFi Protocol | Improper Access Control | — |
| 09 Aug 2022 | Curve DEX | $575,000 | DeFi Protocol | DNS Hijack | $575,000 |
| 02 Mar 2026 | Curve LlamaLend | $240,000 | DeFi Protocol | Donation Attack | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 01 May 2022 | Rari Capital | $80.0m | DeFi Protocol | Reentrancy | — |
| 17 Jun 2016 | The DAO | $60.0m | DeFi Protocol | Reentrancy | — |
| 09 Jul 2025 | GMX V1 EVM | $42.0m | DeFi Protocol | Reentrancy | $40.0m |
| 18 Dec 2021 | Grim Finance | $30.0m | DeFi Protocol | Reentrancy | — |
| 03 Sept 2024 | Penpie | $27.0m | DeFi Protocol | Reentrancy | — |
All failures in 2023 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Curve DEX, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/curve-dex-2023-07-30/. How this is built