Hack history / 2026 / Hack or exploit
Curve LlamaLend
Hack or exploit on Mar 2, 2026 · Donation Attack
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$240K
dollars at the time
Returned
none listed
as the sources state it
Rank
#1,416
among thefts by dollars lost
What happened
Attacker flash-loaned 10M USDC and 15,986 WETH from Morpho Blue to manipulate sDOLA vault exchange rate, triggering liquidations of 27 borrowers in sDOLA/crvUSD market for ~$240K profit. Oracle vulnerability: CryptoFromPoolVaultWAgg used sDOLA.convertToAssets() as spot price without atomic-manipulation protection.
Details
- Date
- Mar 2, 2026
- Kind
- Hack or exploit
- Method
- Donation Attack
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Reported by
Related incidents
Curve Finance 2025 · Hack or exploit · undisclosed
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2023 · Hack or exploit · $51.4M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2023 · Hack or exploit · $51.4M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Cite this page
SwanBluechip, "Curve LlamaLend hack, Mar 2, 2026: $240K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht5c81a83c10/ (data as of 2026-10-31).