Hack history / 2023 / Hack or exploit
Curve Finance MEV Bot
Hack or exploit on Nov 7, 2023 · Improper Access Control
IN REVIEWSOURCES AGREE ON DATE AND LOSS · 5 SOURCES
Lost
$2M
sources: $2M to $2.2M
Returned
none listed
as the sources state it
Rank
#696
among thefts by dollars lost
What happened
An MEV arbitrage bot on Ethereum was exploited when an attacker discovered a vulnerability allowing unauthorized calls to a function that traded wBTC for wETH. Using a flash loan to manipulate Curve pool prices, the attacker forced the bot to purchase wBTC at inflated prices.
In review: possible duplicate within one source.
Details
- Date
- Nov 7, 2023
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Bitcoin
Related incidents
Curve LlamaLend 2026 · Hack or exploit · $240K
Curve Finance 2025 · Hack or exploit · undisclosed
Curve DEX 2023 · Hack or exploit · $51.4M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Curve Finance 2025 · Hack or exploit · undisclosed
Curve DEX 2023 · Hack or exploit · $51.4M
Curve DEX 2022 · Hack or exploit · $575K
Curve Finance 2021 · Hack or exploit · $30M
Cite this page
SwanBluechip, "Curve Finance MEV Bot hack, Nov 7, 2023: $2M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htfb47e8ffd5/ (data as of 2026-10-31).