Security Incident · ETH Ecosystem
Curve Finance Malicious Code Injection Attack: $428.00K Reported Loss
The Curve Finance frontend was attacked, prompting users to grant token approvals to malicious smart contracts.
- Reported loss
- $ 428,000
- Attack category
- Malicious Code Injection Attack
Incident Overview
The attackers moved the stolen funds to FixedFloat and Tornado Cash, with at least 362 ETH (~$620,000) stolen. FixedFloat tweeted that they had frozen 112 stolen ETH (~$192,000).
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.