Vyper, the programming language of Ethereum, tweeted at 12:44 am that versions 0.2.15, 0.2.16, and 0.3.0 have a vulnerability in the staircase lock.
At 12:45 am, Curve's official Twitter announced that due to the staircase lock issue, stablecoin pools (alETH/msETH/pETH) using Vyper 0.2.15 were attacked. The team is assessing the situation and will provide updates to the community as it develops. Other pools remain secure.
According to the latest statistics from PeckShield, the attack resulted in approximately $52 million in losses.
Due to the asset theft, the CRV price has dropped by 16% in the last 24 hours.
The continuous decline in CRV price may lead to the liquidation of Curve founder michwill. According to Debank data, michwill has used CRV as collateral to borrow stablecoins such as USDT and USDC from lending protocols like AAVE, Frax, Abracadabra, and others.
https://debank.com/profile/0x7a16ff8270133f063aab6c9977183d9e72835428？chain=eth