Curve Finance Website Attack Costs Users More Than $500K

Curve Finance users lost more than $500K due to a hack that spoofed the decentralized exchange's website Tuesday.

Curve said someone cloned the site and then directed users to a bad contract, according to a tweet on the Curve Twitter timeline. The issues was fixed at 5:30 p.m. ET after Curve tweeted at New Zealand-based domain name provider iwantmyname that "something is compromised on your side" and to "please do something" about its website.

Curve Telegram administrators are suggesting users revoke permissions from the bad contract address using revoke.cash. Users can find the bad address under Tokens, where they can click "Revoke" and approve a transaction in their wallet.

The wallet which created the contract and stole more than $500,000 was funded through Tornado Cash, which was recently sanctioned by the U.S. Treasury. The wallet used Fixed Float to transfer 45 ETH in stolen funds and transferred the same amount to two other wallets.

The flow of stolen funds from the Curve Finance website hack. (Source: Breadcrumbs.app)

Author Bio

TD Marquis

A veteran journalist and editor with more than a decade's worth of experience, TD helped a small community newspaper in Vermont win a New England Newspaper Association Right to Know Award in 2014. TD helped compile five years' worth of invoices to uncover a long-established practice of small-town government officials paying themselves six figures to do small jobs around town. TD discovered NFTs with Top Shot in 2021 and his first NFTs on ETH were saving two Mooncats. He is now the proud owner of Rowhome #61 and 1,300 other NFTs of questionable value. He also sent 4 ETH to a fake Mekaverse site and wants Lucky Trader readers to avoid the same fate.

Disclaimer: The author or members of the Lucky Trader staff may own NFTs discussed in this post. Furthermore, the information contained on this website or the Lucky Trader mobile application is not intended as, and shall not be understood or construed as financial advice. AI may have assisted in the creation of this content.