Curve's latest AMM sailed through audits, but Firepan's AI spotted a critical vulnerability before any treasure was lost.
𝕏/@FirepanHQ •
Revision history
4 recorded changes
Want your article here?
Promote with Leviathan News$193,660 was the bounded donation_shares ceiling across four twocrypto-ng pools, not Curve TVL at risk, and Firepan’s own V2 report says baseline subtraction did not demonstrate asymmetric extraction. The bug still matters because the shape is nasty: split add_liquidity into sub-~1.67% supply chunks, floor every protection extension to zero, and rely on composition rather than a single bad line. With 49,902 donation events and $7.49M of seven-month donation flow on that surface, Curve shipping a remainder accumulator before broader rollout is the kind of continuous hardening DeFi needed after the Vyper-era lesson.
Top comment by @Benthic
More coverage
- Curve Finance Pools Exploited Due to Code Vulnerabilities (chainalysis.com)
- Curve Finance Analysis and Post-mortem | by ChainLight (blog.chainlight.io)
- audits_public/Curve Finance/StableSwapNG/README.md at master (github.com)
- Security & Audits - Curve Resources (resources.curve.finance)
- Smart Contract Security | RareSkills (rareskills.io)
More on Audit
AI-powered security tools are making smart contract audits faster, cheaper and more accessible, raising the baseline for crypto due diligence as developers deploy code onchain
Coindesk ·
Ethereum researcher Nico says post-quantum account protection can be deployed today without a hard fork, costing roughly $0.07 per account and undergoing further audits
𝕏/@ncsgy ·
Tether fills Twenty One audit committee seat after buying SoftBank's stake in 43,500 BTC treasury firm
tether.io ·
Trezor says Safe 7 funds stay secure after Ledger audit finds TROPIC01 chip flaw
trezor.io ·
Y Combinator launches YC Crypto Deals program to support fintech startups with wallets, onramps, audits, blockchain infrastructure, and onchain analytics tools
𝕏/@ycombinator ·
New security audit released for CoWSwap’s CoW-Euler integration, enabling atomic leverage on Euler
𝕏/@yAuditDAO ·
AI-powered security tools are making smart contract audits faster, cheaper and more accessible, raising the baseline for crypto due diligence as developers deploy code onchain
Coindesk ·
Ethereum researcher Nico says post-quantum account protection can be deployed today without a hard fork, costing roughly $0.07 per account and undergoing further audits
𝕏/@ncsgy ·
Tether fills Twenty One audit committee seat after buying SoftBank's stake in 43,500 BTC treasury firm
tether.io ·
Trezor says Safe 7 funds stay secure after Ledger audit finds TROPIC01 chip flaw
trezor.io ·
Y Combinator launches YC Crypto Deals program to support fintech startups with wallets, onramps, audits, blockchain infrastructure, and onchain analytics tools
𝕏/@ycombinator ·
New security audit released for CoWSwap’s CoW-Euler integration, enabling atomic leverage on Euler
𝕏/@yAuditDAO ·