Historical replay · CRV/USD
The Curve Finance Hack and the Founder's $100M Liquidation Scare (July 2023)
A coding-language bug let attackers drain over $70 million from Curve Finance on July 30, 2023. CRV fell over 30% in three days — not just on the loss itself, but on fears the protocol's own founder could trigger a DeFi-wide liquidation cascade.
On July 30, 2023, several liquidity pools on Curve Finance — one of DeFi's largest decentralized exchanges, specialized in trading similarly-priced assets like stablecoins — were exploited for more than $70 million. The root cause wasn't a bug in Curve's own code, but a reentrancy vulnerability in specific older versions of the Vyper programming language that several of its pools were compiled with, a reminder that DeFi risk often sits in shared infrastructure rather than any single protocol.
CRV, Curve's governance token, fell from a close near $0.74 on July 29 to an intraday low of $0.482 on August 1 — a decline of roughly 35% peak to trough. The drop was driven by more than the direct hack losses: Curve's founder, Michael Egorov, was known to be holding roughly $100 million in loans across multiple DeFi lending platforms, collateralized by a large personal CRV position. A falling CRV price pushed those loans closer to their liquidation thresholds, raising fears that a forced liquidation could dump a huge amount of CRV at once, crashing the price further and potentially leaving several lending platforms with bad debt.
The cascade never fully materialized — Egorov sold portions of his position over-the-counter to relationship investors to pay down the loans directly, and CRV stabilized in the $0.58-$0.61 range within days. The episode became a widely cited case study in a specific kind of DeFi risk: a large, publicly visible, collateralized loan held by a single influential holder can turn an isolated hack into a systemic worry across the entire lending ecosystem it touches.