Curve Finance resolves hack from earlier today

Curve Finance resolved a hack it suffered earlier today, the company said in a late-afternoon Twitter update.  

The hack was discovered when a Paradigm researcher tweeted that Curve’s front end had been compromised.

The Curve team was able to find and revert the hack, and issued a statement asking people to revoke any contract approvals on its platform.

The hacker used a Domain Name Service (DNS) spoofing hack, cloning the site and redirecting the DNS point to their IP address. Then, they added approval requests to a malicious contract to steal the funds. 

Users who had connected to Curve with their MetaMask wallet were at risk of having their funds stolen. ZachXBT, an anonymous on-chain investigator, reported that the hacker took approximately $570,000. The hacker tried moving funds through FixedFloat, a fully automatic cryptocurrency exchange on the Bitcoin Lightning Network. The exchange froze and secured roughly $200,000 of the stolen funds.

“This did not appear to be a hijack at the registrar level, but rather systems at @iwantmyname compromised themselves,” TCPShield founder Steven Ferguson tweeted. His company is a Distributed Denial-of-Service (DDoS) protection platform.

Curve Finance is one of the largest decentralized exchanges by total value locked (TVL), holding over $6 billion. 

© 2022 The Block Crypto, Inc. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.