December 22, 2023: Slay Ride 🛷🎁
Yes, Virginia, there is a Santa Claus
It’s a Christmas miracle! In the form of official restitution from the Vyper exploit.
And, what a long strange trip it’s been…
Let’s recap the difficult year.
Even though the events technically started later, we trace the origin of the troubles to late July, when Conic Finance was hacked.
July 21, 2023: Conic Finance Hacked 🌌💥
Sad news from our frens at Conic Finance. Their recently launched ETH omnipool got hacked, leading to $3MM worth of ETH getting drained in short order. It started about four hours ago, when a flashloan exploit was detected.crv.mktcap.eth is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscri…
Even though it’s not directly related, our tinfoil hat theory is that this event is what inspired hackers to start sniffing around reentrancy bugs around Curve. And then, the week from H-E-🏒-🏒
July 31, 2023: Snekbit 🐍🩸
What a catastrophic weekend. So many of our frens and favorite protocols got devastated, as a zero day Vyper bug was exploited as hackers drained four Curve ETH pools.
August 1, 2023: Loan Sharks 🦈💸
The Llama Risk team is back, proving once again they are the cream of the crop. In the day since the Curve hack, they’ve put together a highly detailed post-mortem covering the reentrancy exploit that hammered four Curve pools over the weekend. Must read…
August 2, 2023: Post Mortem Vita ⚰️🥀
Despite the tragedy of the weekend, yesterday it was too noisy to mourn properly. Instead all eyes were glued to the high stakes game of cat and mouse... Fortunately, the unhinged mob pursuing Michi is temporarily regrouping to catch their breath. Unfortunately, it looks as though they’ll be back out in full force soon enough, but we suspect he’ll be r…
August 3, 2023: Surgit Ex Cineribus 🦅🔥
After the hack, we predicted everybody should buckle up and prepare for a week of wading through high waters. Good advice it turns out. Finally, after three hellish weekdays, is Curve rising again? A proverbial phoenix from the ashes? Here are some of the bright points.
The ensuing weeks would see a global manhunt for the perpetrator, who remains elusive to this day.
August 7, 2023: Manhunt 🏃🕵️♀️
Big news out of PayPal as we hit publication, which we’ll cover in more depth tomorrow… Vyper Last week we saw the official Vyper post-mortem drop. This marks the latest official post-mortem to drop since the hack, and certainly worth the wait. The sweeping report covers compiler level context on the state of reentrancy and a meticulous step-by-step accounting of all the changes related to this incident.
Great people aren’t created by good times. It’s only when life is challenging that heroes emerge.
August 18, 2023: @big_tech_sux 🦙🎉
Frens, join us at 9 AM PT for a live llama/snek party featuring Charles (aka @big_tech_sux) of Vyper fame! Discord: https://discord.gg/nwD6tKdG?event=1142054369030836315 YouTube: https://youtube.com/live/j5sMOKxYzog?feature=share For those new to Llama Parties, they are perfect ways for llamas to socialize without needing to leave the comfort of their comp…
By September, we’d see the first signs of recovery
September 14, 2023: Recovery Snapshot 🚑📸
Since the Vyper exploit, many protocols are returning to normal operations. Notably, JPEG’d is basically back up and running, with just a few lingering amounts to be addressed.crv.mktcap.eth is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.
We'd enter the holiday season,
When what to our wondering eyes should appear?
But a miniature sleigh spreading holiday cheer.
With a little old driver, so lively and rich,
We knew in a moment it must be St. Mich.
Dec. 18, 2023: Made a List, Checked it Twice 📜🎅
#TaipeiBlockchainWeek For a year in which our stocking already runneth over with FOMO, it’s very appropriate to see the year wind down with our heaviest helping of FOMO yet, out of Taipei! Until the videos are posted, we’re reduced to hunting for leaks on 𝕏 to get a sense of what exactly happened. 请发布视频！
December 19, 2023: 0xBabe's in Toyland 👯♀️🎁
The Curve Vest-Split github repository is live, and has been deployed for all the affected pools. Next question is who will be the white knight who votes to execute the funding of these contracts.crv.mktcap.eth is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.
And the rest, as they say, is history. Merry Christmas frens and fam!