On June 27, Yishi, the founder of Onekey, posted about "Curve ecosystem DeFi protocol Resupply suffering a price manipulation attack resulting in a loss of 9.6 million USD," calling for Curve to provide a fair solution for every investor and to return the user funds lost due to the project party's mistakes.
Yishi stated that it is one of the three major investors in Resupply, and the losses from this attack event involve millions of dollars, causing not only significant economic losses but also immense psychological pressure. Its main stance for rights protection is that many investors, including itself, made large investments based on the credibility of Resupply being considered to have Curve; this loss was not caused by market fluctuations or bad debt events, but rather a technical failure—an ERC4626 inflation vulnerability, due to the team's failure to destroy the initial shares when deploying the new vault; the Resupply team has shifted the losses to the insurance pool depositors without any sense of responsibility. The purpose of the insurance pool is to cover black swan events and market risks, not internal negligence, and the Resupply team has never stated in the protocol that the insurance pool can bear losses caused by team errors; Curve and crvusd have gained substantial benefits from Resupply, and they should not be allowed to abandon their responsibilities. This vulnerability is not a market issue but a design and deployment flaw, and the responsibility lies with the team, not the users. The treasury of Convex or Yearn should share the responsibility.
This morning, Curve Finance made a statement regarding this security incident: "Although Resupply was not developed by Curve developers, the creators of Resupply are highly capable and experienced, and we believe they will do their utmost to resolve this issue. The affected Resupply insurance pool is designed to provide protection against such security incidents. If recovery is possible, it should be a priority and will help mitigate the overall impact of such incidents."
The content is for reference only, not a solicitation or offer. No investment, tax, or legal advice provided. See Disclaimer for more risks disclosure.
17 Likes
Reward
17
8
Share
Comment
0/400
RektRecorder
· 3h ago
Sigh, another one who got Clip Coupons.
Reply0
ContractTester
· 17h ago
Who hasn't done a good job on the Code Review now?
Reply0
TopEscapeArtist
· 06-27 09:16
Bullish Tied Up, losing money, brothers.
Reply0
YieldHunter
· 06-27 09:12
actually, another defi hack... looking at the risk metrics, this was inevitable smh
Reply0
GmGnSleeper
· 06-27 09:10
Lost a k of w~ so refreshing
Reply0
SellTheBounce
· 06-27 09:07
Don't overthink it; Rug Pull is obviously the safest option.
Curve involved in a $9.6 million attack incident, Onekey founder calls for a fair resolution.
On June 27, Yishi, the founder of Onekey, posted about "Curve ecosystem DeFi protocol Resupply suffering a price manipulation attack resulting in a loss of 9.6 million USD," calling for Curve to provide a fair solution for every investor and to return the user funds lost due to the project party's mistakes.
Yishi stated that it is one of the three major investors in Resupply, and the losses from this attack event involve millions of dollars, causing not only significant economic losses but also immense psychological pressure. Its main stance for rights protection is that many investors, including itself, made large investments based on the credibility of Resupply being considered to have Curve; this loss was not caused by market fluctuations or bad debt events, but rather a technical failure—an ERC4626 inflation vulnerability, due to the team's failure to destroy the initial shares when deploying the new vault; the Resupply team has shifted the losses to the insurance pool depositors without any sense of responsibility. The purpose of the insurance pool is to cover black swan events and market risks, not internal negligence, and the Resupply team has never stated in the protocol that the insurance pool can bear losses caused by team errors; Curve and crvusd have gained substantial benefits from Resupply, and they should not be allowed to abandon their responsibilities. This vulnerability is not a market issue but a design and deployment flaw, and the responsibility lies with the team, not the users. The treasury of Convex or Yearn should share the responsibility.
This morning, Curve Finance made a statement regarding this security incident: "Although Resupply was not developed by Curve developers, the creators of Resupply are highly capable and experienced, and we believe they will do their utmost to resolve this issue. The affected Resupply insurance pool is designed to provide protection against such security incidents. If recovery is possible, it should be a priority and will help mitigate the overall impact of such incidents."