What Curve DAO does
Curve Finance, launched in 2020 by Michael Egorov, is a decentralised exchange purpose-built for swapping between pegged assets — stablecoins, and later staked and wrapped versions of the same underlying asset — with far lower slippage than general-purpose AMMs like Uniswap achieve on the same trades. Its stableswap invariant, a specialised bonding curve, is the technical backbone underneath much of DeFi's stablecoin liquidity, and Curve pools remain a default venue for large stablecoin trades and for protocols needing deep, reliable pegged-asset liquidity.
CRV is Curve's governance token, but its real innovation is the vote-escrow model: locking CRV for up to four years mints veCRV, which grants voting power over which liquidity pools receive CRV emissions, plus boosted rewards and a share of trading fees for the locker. That design incentivised protocols and whales to buy and permanently lock large amounts of CRV purely to direct emissions toward their own pools, sparking the so-called 'Curve Wars' — a proxy battle fought largely through Convex Finance, which aggregates veCRV voting power on behalf of depositors. The vote-escrow model has since been copied by dozens of other DeFi protocols.
Risks
Curve's worst moment came in July 2023, when a reentrancy vulnerability in specific versions of the Vyper programming language — not a bug in Curve's own code, but in a compiler dependency several of its pools were built with — was exploited to drain roughly $70 million from multiple Curve pools. The attack rattled the entire DeFi sector because of what followed: founder Michael Egorov had taken out large CRV-collateralised loans across several lending protocols, and the hack's impact on CRV's price pushed those positions close to liquidation. A cascading liquidation of Egorov's CRV collateral risked flooding the market and destabilising the lending protocols holding it as collateral, a systemic contagion risk that was ultimately defused through OTC sales of CRV to other investors rather than through the market absorbing it directly.
What it means going forward
That episode exposed a structural weakness that had been largely invisible until it nearly broke: a founder's personal leverage against his own project's governance token had become a single point of failure for a meaningful slice of DeFi. Curve has continued operating since, and the stableswap and vote-escrow mechanics remain widely used and genuinely influential design patterns, but CRV's price has never fully recovered its pre-hack trajectory, and the episode is a standing reminder that smart contract risk isn't limited to a protocol's own code — it extends to its dependencies, and to the financial decisions of the people who control large token positions.