Curve Finance Compromised by Hackers, $570,000 in ETH Stolen From Users

In the slew of hack attacks affecting the crypto industry lately, another one has made it to the list. In a frontend attack, cyber criminals compromised Curve Finance, which is a decentralised exchanged launched in 2020. The platform also works as an automated market maker (AMM) that enables the trading for stablecoins and wrapped digital assets. The hackers managed to get away with $570,000 (roughly Rs. 4 crore) worth of Ether.

The hacker(s) compromised a Curve domain name to redirect unsuspecting Curve users to a malevolent web address. As per Curve developers, the Curve.fi nameserver site had suffered the breach.

The platform has claimed to have investigated and resolved the issue.

Zachxbt, a Web3 on-chain investigator, has claimed that the stolen funds were deposited to the FixedFload crypto exchange to launder them.

In a swift response to Zackxt’s alert, FixedFloat took timely action and managed to secure ETH worth $191,088 (roughly Rs. 1.5 crore). This makes for ETH 112.

This attack on Curve Finance marks the fifth large-scale hack on crypto firms in the last one month.

In July, NFT registration platform Premint lost 320 NFTs in a hack attack. The hackers were found to have re-sold the stolen NFTs for a total of $400,000 (roughly Rs. 3.20 crore) in 275 Ether tokens.

The same month, Audius, a decentralised music platform, lost 18 million community tokens in a hack attack over the weekend. While the total cost of the transferred tokens exceeded $6 million (roughly Rs. 47 crore), the hacker managed to take away $1.8 million (roughly Rs. 14 crore).

In August, Nomad, a cross-chain bridge lost $200 million (roughly Rs. 1,570 crore) in an exploit.

Marking one of this year’s largest DeFi attacks so far, around 8,000 crypto wallets on the Solana network were drained out of around $8 million (roughly Rs. 63 crore) earlier this month.