{"id":82668,"date":"2023-08-05T13:55:17","date_gmt":"2023-08-05T10:55:17","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=82668"},"modified":"2025-09-12T06:27:51","modified_gmt":"2025-09-12T03:27:51","slug":"curve-hacking-hacker-returns-part-of-stolen-assets","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/curve-hacking-hacker-returns-part-of-stolen-assets\/","title":{"rendered":"Curve-hacking hacker returns part of stolen assets"},"content":{"rendered":"<p>An unknown hacker, who attacked the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-a-decentralised-exchange-dex\">DEX<\/a> Curve Finance, has begun returning funds. At the time of writing, he had sent back assets worth more than $20 million.<\/p>\n<figure class=\\\"wp-block-image size-large\\\"><img loading=\\\"lazy\\\" decoding=\\\"async\\\" width=\\\"1024\\\" height=\\\"395\\\" src=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.31-1024x395.png\\\" alt=\\\"Snimok-ekrana-2023-08-07-v-10.37.31\\\" class=\\\"wp-image-213062\\\" srcset=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.31-1024x395.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.31-300x116.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.31-768x296.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.31.png 1194w\\\" sizes=\\\"auto, (max-width: 1024px) 100vw, 1024px\\\" \/><figcaption class=\\\"wp-element-caption\\\">Data: <a href=\\\"https:\/\/twitter.com\/AlchemixFi\/status\/1687531017161105408\\\">Twitter<\/a>.<\/figcaption><\/figure>\n<p>In a message regarding the <a href=\\\"https:\/\/etherscan.io\/tx\/0x23c4799784c91023204bd68a94ec7a963486f2485dc43c13d8b804d5301b8041\\\">transaction<\/a>, the hacker explained that his decision was not fear of being caught, but a reluctance to ruin the project.<\/p>\n<blockquote class=\\\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\\\"><p>\\n<cite>\\&#8221;Perhaps this is a lot of money for many people, but not for me. I am smarter than all of you,\\&#8221; he wrote.<\/cite><\/p><\/blockquote>\n<p>The JPEG\u2019d project also confirmed the return of 5,494 WETH (more than $10 million). The hacker received the promised 10% reward of 610.6 WETH ($1.1 million).<\/p>\n<figure class=\\\"wp-block-image size-large\\\"><img loading=\\\"lazy\\\" decoding=\\\"async\\\" width=\\\"1024\\\" height=\\\"604\\\" src=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.48-1024x604.png\\\" alt=\\\"Snimok-ekrana-2023-08-07-v-10.37.48\\\" class=\\\"wp-image-213064\\\" srcset=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.48-1024x604.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.48-300x177.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.48-768x453.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-07-v-10.37.48.png 1194w\\\" sizes=\\\"auto, (max-width: 1024px) 100vw, 1024px\\\" \/><figcaption class=\\\"wp-element-caption\\\">Data: <a href=\\\"https:\/\/twitter.com\/JPEGd_69\/status\/1687594063527038976\\\">Twitter<\/a>.<\/figcaption><\/figure>\n<p>On July 30, an unknown <a href=\"https:\/\/forklog.com\/en\/news\/hacker-drains-curve-finance-liquidity-pools-of-47-million\">attacker<\/a> attacked Curve Finance&#8217;s stablecoin pools, using a vulnerability in the Vyper code. Initially, total losses from the hack were estimated at $47 million. According to <a href=\\\"https:\/\/defillama.com\/hacks\\\">Defi Llama<\/a>, the amount rose to $61.7 million.<\/p>\n<p>The incident affected projects Alchemix, JPEG\u2019d, MetronomeDAO, Ellipsis and deBridge. Because of the bug, more than 450 pools were at risk.<\/p>\n<p>In the days following the hack, the CRV token fell by around 30%, dropping to $0.50. Since then, the asset has begun to recover \u2014 at the time of writing, CRV trades around $0.63.<\/p>\n<figure class=\\\"wp-block-image size-large\\\"><img loading=\\\"lazy\\\" decoding=\\\"async\\\" width=\\\"1024\\\" height=\\\"640\\\" src=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-1024x640.png\\\" alt=\\\"Snimok-ekrana-2023-08-05-v-13.52.58\\\" class=\\\"wp-image-213023\\\" srcset=\\\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-1024x640.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-300x188.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-768x480.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-1536x960.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-08-05-v-13.52.58-2048x1280.png 2048w\\\" sizes=\\\"auto, (max-width: 1024px) 100vw, 1024px\\\" \/><figcaption class=\\\"wp-element-caption\\\">Hourly CRV\/USDT chart on Binance. Data: <a href=\\\"https:\/\/www.tradingview.com\/symbols\/CRVUSDT\/\\\">TradingView<\/a>.<\/figcaption><\/figure>\n<p>Earlier, <a href=\"https:\/\/forklog.com\/en\/news\/what-is-tron-trx\">Tron<\/a> co-founder Justin Sun and Huobi co-founder Jun Du purchased <a href=\"https:\/\/forklog.com\/en\/news\/justin-sun-buys-2-9-million-worth-of-crv-tokens\">5 million CRV<\/a> and <a href=\"https:\/\/forklog.com\/en\/news\/curve-finance-founder-sells-10-million-crv-to-huobi-co-founder\">10 million CRV<\/a> respectively from Curve Finance founder Mikhail Yegorov at a price below market \u2014 $0.40 per token.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An unknown hacker, who attacked Curve Finance&#8217;s DEX, has begun returning funds. At the time of writing, he had sent back assets worth more than $20 million.<\/p>\n","protected":false},"author":1,"featured_media":82669,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1426,1093,1195],"class_list":["post-82668","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-curve-crv","tag-defi","tag-white-hat-hackers"],"aioseo_notices":[],"amp_enabled":true,"views":"26","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/82668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=82668"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/82668\/revisions"}],"predecessor-version":[{"id":82670,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/82668\/revisions\/82670"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/82669"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=82668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=82668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=82668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}