DeFi Projects Lose Millions in Curve Pool Exploits

Attackers exploited a vulnerability in liquidity pools on the Curve decentralized finance platform, stealing over $24 million worth of cryptocurrency. The vulnerability was traced back to a third-party programming language called Vyper, which caused a malfunctioning reentrancy lock. Several projects, including JPEG'd, Alchemix, and Metronome DAO, were affected by the attack. Reentrancy attacks, where a smart contract interacts with another contract before fully executing, have been a common vector for attackers. The incident highlights the importance of proper design and development to avoid such vulnerabilities.