Curve may have potential security risks related to ERC-777, and the official response is that the relevant fund pool has long been abandoned

Odaily Planet Daily News Today, the security team Decurity discovered another security vulnerability on the Curve platform. Curve uses ERC-777 Callback in smart contracts in some token markets, and this usage has security risks and may be attacked by re-entry. Decurity also notes that a MEV bot has exploited this vulnerability to conduct a $1,900 attack. Curve officially responded that the issue is a historical issue. The attack occurred on the long-deprecated pBTC pool, but a small amount of funds remained in the contract. It is unclear whether other pools of funds have similar security risks.