Due to vulnerabilities in certain versions of Vyper, the Curve stablecoin pools alETH/msETH/pETH have been subjected to attacks.

Odaily News: Ethereum programming language Vyper has announced that versions 0.2.15, 0.2.16, and 0.3.0 have a recursive lock vulnerability. An investigation is currently underway, but any projects using these versions should contact us immediately.



Official response from Curve: Due to the vulnerability in Vyper 0.2.15, certain stablecoin pools (alETH/msETH/pETH) have been attacked. We are assessing the situation and will release updates to the community as the situation develops. Other pools are safe.