Hack history / 2022 / Hack or exploit
Curve DEX
Hack or exploit on Aug 9, 2022 · DNS Hijack
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$575K
sources: $428K to $620K
Returned
$620K
100% of the loss, as a source states it
Rank
#1,101
among thefts by dollars lost
What happened
On August 9, 2022, Curve Finance's DNS provider (iwantmyname) was hijacked, redirecting users to a malicious frontend that injected token approval transactions. Curve's smart contracts remained secure; the team quickly identified and reverted the issue.
In review: recovered above loss.
Details
- Date
- Aug 9, 2022
- Kind
- Hack or exploit
- Method
- DNS Hijack
- How in
- Keys, accounts and infrastructure
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Frozen
- $192K
“FixedFloat tweeted that they had frozen 112 stolen ETH (~$192,000).” (SlowMist Hacked) - Recovered or frozen
- yes, amount not stated
“$620K taken, $0K after recovery or freezing” (Web3 Is Going Great)
Related incidents
Curve LlamaLend 2026 · Hack or exploit · $240K
Curve Finance 2025 · Hack or exploit · undisclosed
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2023 · Hack or exploit · $51.4M
Curve Finance 2021 · Hack or exploit · $30M
Curve Finance 2025 · Hack or exploit · undisclosed
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2023 · Hack or exploit · $51.4M
Curve Finance 2021 · Hack or exploit · $30M
Cite this page
SwanBluechip, "Curve DEX hack, Aug 9, 2022: $575K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht24ee630d46/ (data as of 2026-11-01).