Cex price feed prevents Curve price from collapsing amid $100M vulnerability
A vulnerability in the Vyper programming language widely used by DeFi protocols like Curve Finance led to exploit of multiple Curve liquidity pools on Sunday. Several Curve Finance liquidity pools were attacked on July 30 due to a vulnerability found in the programming language Vyper. Vyper is a contract programming language created for the Ethereum Virtual Machine (EVM). Curve Finance is one of the key decentralized finance (DeFi) protocol due to the key liquidity services it offers, thus the code vulnerability has put nearly $100 million worth of digital assets at risk. The vulnerability was found in the version 0.2.15, 0.2.16 and 0.3.0 leading to a malfunctioning reentrancy lock. As a result, millions were drained from four Curve pools namely aETH/ETH, msETH/ETH, pETH/ETH and CRV/ETH. The flaw in three of its variants may have an effect on a number of other protocols. Please note that this reentrancy issue is associated with the use of 'use_eth', which could potentiall...