Cyvers in the News

Curio Hit by $16 Million Exploit Due to Voting Power Vulnerability

‍Curio, a project focused on facilitating liquidity from real-world assets for firms, has fallen victim to a smart contract exploit related to a vulnerability in voting power privileges.

^{According to the Web3 security firm Cyvers, the hack most likely occurred due to a vulnerability in the permissioned access logic.} This vulnerability allowed the attacker to create an additional 1 billion CGT tokens, which in turn resulted in the hacker obtaining CGT tokens worth almost $16 million.

Hacker mints 1B tokens in $16M Curio smart contract exploit

‍Curio said it will conduct a fund compensation program for affected liquidity providers, which could potentially take up to one year to complete.

^{Web3 security firm Cyvers estimated that the losses from the exploit are about $16 million.} The security firm said the exploit involved a “permission access logic vulnerability.”

Hacker mints 1b CGT tokens worth $40m in Curio ecosystem

‍^{According to analysts at Cyvers Alerts, the hack most likely occurred due to a vulnerability in the permissioned access logic,} which allowed the attacker to create an additional 1 billion CGT tokens. As a result, the hacker took possession of CGT tokens worth almost $40 million.