Security Incident
Curve Finance Account Compromise
Curve Finance’s official website and X account were compromised in quick succession.
- Attack category
- Account Compromise
Incident Overview
On May 5, attackers first took control of the project’s X account and used it to post a phishing message promoting a fake airdrop. Then on May 12, the project issued a warning that the Curve frontend had been “hijacked,” in what appeared to be a domain takeover incident.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.