News
Ratings
Learn
Companies
Open Companies →
Who runs each service, how it works, where the risks are.All 30 companies A–Z →
About
New to crypto? Start here
Decentralised Exchanges · OBOL rating

Curve Finance review

Still the cheapest place to move size between pegged assets, and still carrying the scar of the 2023 Vyper exploit.

8.1/10
Strong
#4 of 15 decentralised exchangesChecked August 2026
The short answer

Curve is the cheapest place in DeFi to swap between pegged assets — stablecoins, staked-ETH derivatives, wrapped bitcoin variants — and the difference against a general-purpose AMM grows with order size. Its security mark of 7 reflects the July 2023 Vyper compiler exploit that drained several pools rather than a flaw in its own core logic.

Best forLarge stablecoin and pegged-asset swaps

Score breakdown

Category rubric →
  1. Security recordweight 25%
    7.0avg 7.5
  2. Liquidity & executionweight 20%
    9.0avg 7.8
  3. Costweight 15%
    9.5avg 8.1
  4. Chain coverageweight 15%
    8.5avg 7.3
  5. Decentralisationweight 15%
    8.0avg 7.4
  6. UX & toolingweight 10%
    6.5avg 7.9

this service category average across 15Score = Σ mark × weight. Recommendable to most readers, with stated caveats. Methodology.

The evidence behind each mark

Scoring rules →
CriterionMarkWhat we foundSourceChecked
Security record7.0not sourced yetnot sourced yet—
Liquidity & execution9.0not sourced yetnot sourced yet—
Cost9.5not sourced yetnot sourced yet—
Chain coverage8.5not sourced yetnot sourced yet—
Decentralisation8.0not sourced yetnot sourced yet—
UX & tooling6.5not sourced yetnot sourced yet—

What we liked, and what fell short

Liked
  • Unbeatable pricing on stablecoin and LST pairs at size
  • Deep pools across many chains with sticky, fee-driven liquidity
  • veCRV model aligns long-term holders with pool depth
Fell short
  • July 2023 Vyper compiler bug drained several pools
  • The interface and gauge system are hostile to newcomers

Why the marks landed where they did

Curve exists because swapping USDC for USDT through a constant-product pool is wasteful. Its invariant is designed for assets that should trade near parity, holding the price flat across most of the curve and only steepening at the extremes. The practical result is that moving seven figures between stablecoins costs a fraction of what it would cost on Uniswap, and that advantage is why Curve remains the settlement layer for pegged assets across DeFi.

How Curve works

Stable pools use the StableSwap invariant for assets expected to hold parity; crypto pools use a different curve for volatile pairs. Liquidity providers earn trading fees, typically 0.01% to 0.04% on stable pools, plus CRV emissions directed by gauge weights. Those weights are set by veCRV holders — users who lock CRV for up to four years — which created an entire secondary market in which protocols bribe lockers to direct emissions toward their pools.

The 2023 exploit

In July 2023 a re-entrancy vulnerability in specific versions of the Vyper compiler, not in Curve's own code, allowed attackers to drain several pools including alETH, msETH and CRV/ETH. Roughly $70m was affected; a substantial share was returned by white-hat actors and negotiating attackers. The distinction matters — Curve's invariant was not broken — but the funds were real and the incident showed how much of DeFi depends on shared tooling nobody audits as carefully as the contracts themselves.

The founder liquidation and systemic risk

A separate 2024 episode saw the founder's large CRV-collateralised borrowing positions liquidated across several lending markets, leaving bad debt behind and putting downward pressure on CRV. It was not a protocol failure, but it demonstrated a concentration risk specific to Curve: the token that governs emissions was also collateral for very large loans held by one person.

Who should use Curve

Anyone swapping stablecoins or liquid staking tokens in meaningful size will get the best price here. Liquidity providers who understand gauge mechanics and are prepared to manage a veCRV or Convex position can earn well. Casual users will find the interface genuinely difficult, and for small swaps an aggregator will route them to Curve anyway without requiring them to understand it.

FAQ

Is Curve safe after the 2023 hack?
The exploit came through a Vyper compiler bug affecting specific pool versions, not Curve's core invariant, and much of the value was returned. The protocol has operated without a comparable incident since, but the episode is why its security mark sits at 7 rather than 9.
Why is Curve cheaper for stablecoins?
Its StableSwap invariant keeps the price nearly flat across most of the curve for assets expected to trade at parity, so price impact on size is a fraction of a constant-product AMM's.
What is veCRV and do I need it?
veCRV is CRV locked for up to four years, granting governance weight over emissions and boosted rewards. Liquidity providers do not need it — many route through Convex to get the boost without locking — but it is central to how Curve's incentives work.
Curve or Uniswap for stablecoins?
Curve, in almost every case at size. On very small swaps the difference is dominated by gas, and an aggregator will pick whichever is cheaper for you.