Curve Finance witnessed a hack attack that drained over $61 million from its Vyper-based liquidity pools on July 30. The report revealed the attacker leveraged a vulnerability in Curve’s Vyper 0.2.15 reentrancy lock.
After the hack, the protocol offered a bounty to the hacker. But based on a report on August 6, the hacker failed to meet the request. As a result, Curve Finance has offered a bounty to anyone who could identify the exploiter.
Curve Extends $1.85 Million Bounty To The Public To Encourage Full Stolen Fund Recovery
In a tweet on July 30, Curve Finance’s team revealed the attack affected four liquidity pools for Ethereum pairs, CRV, Curve Finance’s governance token, and several ERC-20 tokens issued on Metronome Synth (smETH), Alchemix (alETH), and JPEG’d (pETH).
In detail, the exploiter carted away $13.6 million from Alchemix’s alETH-ETH pool, $11.4 million from JPEGd’s pETH-ETH, and $1.6 million from…