PeckShield: The root cause of the attack on Conic Finance is the new CurveLPOracleV2 contract

According to PeckShield's analysis of the attack on Conic Finance, preliminary analysis showed that the root cause came from the new CurveLPOracleV2 contract, and its audit also found similar read-only reentrancy issues. However, the same issue was also present in the newly launched CurveLPOracleV2 contract, which was not included in the scope of the audit. Foresight News previously reported that according to Beosin monitoring, Conic Finance was attacked today and lost about $3.2 million. Purpose-built for liquidity providers, Conic Finance allows users to provide liquidity to the Conic Omnipool, which distributes funds on Curve in proportion to pool weights controlled by the protocol.