RT @CurveFinance: Multichaining is still tough!. This is a review of cross-chain work by our engineer Roman. While porting, he accidentall….

RT @chain_security: Incorrect state proofs could have rekt a few large protocols - we teamed up with @CurveFinance to fix this before any h….

Fun fact: Curve mostly writes contracts in Vyper. Ironically, this issue came from probably our _only_ Solidity usage.

The first team I contacted post-discovery was @chain_security, with @trooocher leading the charge. Huge thanks to them for their exceptional support during investigation, disclosure, and coordination. Many sleepless nights—but also quite a ride! Enjoyed every bit.

Big thanks to my colleague Michael Koptev for the help along the way.

🚨 Discovered a vulnerability in MPT storage proof logic—originally developed 7 years ago and adopted by many top-tier protocols. Fortunately, most were _not_ exploitable—but a few were. The full story is here 👉

Shared our work on cross-chain infra at @CurveFinance at ETH Belgrade.

Shock 😳 Demna shills Vyper 🫢

Dear @ethereum foundation, please help @vyperlang, the language created by @VitalikButerin, with funding. Safety is what makes Ethereum the leader of blockchain space, so please help to keep it that way ♥️.

In case you are running (or planning) fee collection for Curve DAO, created a channel and a group for necessary updates. Also many hooks 🪝 for automation ⚙️ are coming, will write about them there.

Some coins may stuck in Proxy and need a vote to become transferable. You can contact me to aggregate FeeBurning updates 🗳️. If you found a load of unburnt fees you can get a fee for that! 😍🤩😎.

Monitor pool cushions through 🖥️.

Architecture 🏛️ is currently deployed on Ethereum and gnosis. Second 🧙‍♂️can be used for tests. Track future deployments on other chains ⛓️.

My example 🌪️ of code collecting and forwarding fees. Also included some basic schemas 📝.

Some useful links to start with ✨. Fee collection (and whole curve) docs:

All you need is find accrued DAO revenue, claim and collect them in FeeCollector contract 👷‍♂️:

You can make up to 2% for collecting different coins (100k-400k => 2k-8k every week 😳) and up to 0.5% for collecting and forwarding $crvUSD (500k-1m => 2.5k-5k every week 😱). And it’s already online ‼️. Check my wallet 💳 (will exchange into ETH to calculate gas expenses s00n)

All crvUSD sitting as DAO revenue are either generating more profit for Curve(someone borrowed) or PegKeeper’s debt that can be used for better peg. 500k/week ~ 25M/year.

Before, everything was exchanged into 3crv, creating a constant selling pressure for crvUSD, that’s ~500k per week. Direction inverses to buying pressure.