Storia crypto

Curve Vyper reentrancy incident

Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.

Reference note · Sources below

Gli articoli di ricerca e le schede sono pubblicati in inglese. La navigazione è disponibile in sette lingue.

Persone e progetti

In questo articolo

Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.

Source intent, compiler output and deployed bytecode all mattered.

Do not generalise the vulnerable version to every pool or Vyper contract.

Metodi di ricerca

A paused service and a fixed vulnerability are different milestones.

Wallet e sicurezza

An external call transfers control before the caller finishes state updates.

Ricerca MASTR

The archived analysis and today's official guidance answer different questions.

Storia crypto

The original design addressed payment history without a central operator, not every form of financial deception.