Hacker mints 1B tokens in $16M Curio smart contract exploit

Curio said it will conduct a fund compensation program for affected liquidity providers, which could potentially take up to one year to complete.

Real-world asset (RWA) liquidity firm Curio suffered a smart contract exploit involving a critical vulnerability related to voting power privileges, allowing the attacker to steal $16 million in digital assets.

Curio alerted its community of the exploit and highlighted that they are addressing the situation. The company said that a MakerDAO-based smart contract used within Curio was breached.

However, the company assured its users that the exploit only affected the Ethereum side and that all Polkadot and the Curio Chain contracts remained secure.

Read more

...

Read full story at Cointelegraph >