What is Curve DEX's risk level?

Yielna's risk meter reads Low for Curve DEX, from its contracts, their control and its history. It measures structural and historical risk, not future returns.

Is Curve DEX verified by Yielna?

Yes — Curve DEX holds Yielna's verified (first level) badge, awarded only when every requirement is met and verified on-chain.

Who controls Curve DEX's contracts?

Admin control: On-chain governance. Timelock: 7 days before changes take effect.

What is Curve DEX's TVL?

$1.30B, as reported by DefiLlama.

Has Curve DEX been exploited?

3 exploits are recorded for Curve DEX; its page lists each, with what was lost and repaid.

Curve DEX

Visit Official Protocol

Overview

TVL

$1.30B

Up 5% over 90 days

Live since

2020

Staked governance tokens$274.2M· not in TVL

TVL, last 90 days

Risk

How it's measured

Low

Full data

Security

AuditsAudited by Trail of Bits, ChainSecurity, Quantstamp and 2 others, September 2025Audit page 1 Audit page 2

Contract statusAll contracts verified, immutableCurveStableswapFactoryNG 0x6A8c…21bf CurveStableSwapNG pool 0xcc7d…C2A8

Admin controlOn-chain governance

MultisigNone — changes are decided by an on-chain vote

Timelock7 days before changes take effect

Track record

Through market stressCame through all 6Black Thursday (Mar 2020) — deposits grew 57%UST/Luna collapse (May 2022) — kept 28% of its depositsFTX collapse (Nov 2022) — kept 71% of its depositsUSDC depeg (Mar 2023) — kept 87% of its depositsAugust 2024 crash — kept 87% of its depositsOctober 2025 liquidation cascade — kept 95% of its deposits

Exploit history

2 Mar 2026 — Donation Attack at Curve LlamaLend$240K lost · No reimbursement recorded
30 Jul 2023 — Vyper Compiler Bug$61.7M lost · No reimbursement recorded
9 Aug 2022 — DNS Hijack$575K lost · Users were fully reimbursed