Histoire crypto

Curve Vyper reentrancy incident

Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.

Reference note · Sources below

Les enquêtes et les fiches de référence sont publiées en anglais. La navigation est disponible en sept langues.

Personnes et projets

Dans cet article

Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.

Source intent, compiler output and deployed bytecode all mattered.

Do not generalise the vulnerable version to every pool or Vyper contract.

Méthodes de recherche

A paused service and a fixed vulnerability are different milestones.

Portefeuilles et sécurité

An external call transfers control before the caller finishes state updates.

Recherche MASTR

The archived analysis and today's official guidance answer different questions.

Histoire crypto

The original design addressed payment history without a central operator, not every form of financial deception.