Hack history / 2023 / Hack or exploit
Curve DEX
Hack or exploit on Jul 30, 2023 · Vyper Compiler Bug
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 5 SOURCES
Lost
$51.4M
sources: $25.1M to $88M
Returned
$52.3M
100% of the loss, as a source states it
Rank
#102
among thefts by dollars lost
What happened
On July 30, 2023, multiple Curve Finance pools were exploited via a Vyper 0.2.15/0.2.16/0.3.0 compiler bug in reentrancy guards. Attackers stole ~$61.7M across pETH-ETH, alETH-ETH, msETH-ETH, and others; ~68% was later recovered.
In review: sources disagree on the loss.
Details
- Date
- Jul 30, 2023
- Kind
- Hack or exploit
- Method
- Vyper Compiler Bug
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Recovered or seized
- yes, amount not stated
“~68% was later recovered.” (DefiLlama) - Returned by the attacker
- yes, amount not stated
“On August 6, Alchemix tweeted that the Curve Finance hacker had returned all of Alchemix's funds in the Curve pool.” (SlowMist Hacked) - Recovered or frozen
- $52.3M
“$88.0M taken, $35.7M after recovery or freezing” (Web3 Is Going Great)
Related incidents
Curve LlamaLend 2026 · Hack or exploit · $240K
Curve Finance 2025 · Hack or exploit · undisclosed
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Curve Finance 2025 · Hack or exploit · undisclosed
Curve Finance MEV Bot 2023 · Hack or exploit · $2M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Cite this page
SwanBluechip, "Curve DEX hack, Jul 30, 2023: $51.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht931f28443c/ (data as of 2026-11-01).