8.1
Strong
Best Decentralised Exchanges · Review

Curve Finance

Still the cheapest place to move size between pegged assets, and still carrying the scar of the 2023 Vyper exploit.

Best For
Large stablecoin and pegged-asset swaps
Headline Cost
~0.01–0.04% on stable pools
Founded
2020
Rank in category
4 of 15
Last Checked
August 2026
The short answer

Curve is the cheapest place in DeFi to swap between pegged assets — stablecoins, staked-ETH derivatives, wrapped bitcoin variants — and the difference against a general-purpose AMM grows with order size. Its security mark of 7 reflects the July 2023 Vyper compiler exploit that drained several pools rather than a flaw in its own core logic.

Score breakdown

Category rubric →
Security record · 25%
7.0
Liquidity & execution · 20%
9.0
Cost · 15%
9.5
Chain coverage · 15%
8.5
Decentralisation · 15%
8.0
UX & tooling · 10%
6.5

Recommendable to most readers, with stated caveats. The headline 8.1 is the weighted mean of these marks — see our methodology. Not financial advice.

What we liked

  • Unbeatable pricing on stablecoin and LST pairs at size
  • Deep pools across many chains with sticky, fee-driven liquidity
  • veCRV model aligns long-term holders with pool depth

Where it falls short

  • July 2023 Vyper compiler bug drained several pools
  • The interface and gauge system are hostile to newcomers

Curve exists because swapping USDC for USDT through a constant-product pool is wasteful. Its invariant is designed for assets that should trade near parity, holding the price flat across most of the curve and only steepening at the extremes. The practical result is that moving seven figures between stablecoins costs a fraction of what it would cost on Uniswap, and that advantage is why Curve remains the settlement layer for pegged assets across DeFi.

How Curve works

Stable pools use the StableSwap invariant for assets expected to hold parity; crypto pools use a different curve for volatile pairs. Liquidity providers earn trading fees, typically 0.01% to 0.04% on stable pools, plus CRV emissions directed by gauge weights. Those weights are set by veCRV holders — users who lock CRV for up to four years — which created an entire secondary market in which protocols bribe lockers to direct emissions toward their pools.

The 2023 exploit

In July 2023 a re-entrancy vulnerability in specific versions of the Vyper compiler, not in Curve's own code, allowed attackers to drain several pools including alETH, msETH and CRV/ETH. Roughly $70m was affected; a substantial share was returned by white-hat actors and negotiating attackers. The distinction matters — Curve's invariant was not broken — but the funds were real and the incident showed how much of DeFi depends on shared tooling nobody audits as carefully as the contracts themselves.

The founder liquidation and systemic risk

A separate 2024 episode saw the founder's large CRV-collateralised borrowing positions liquidated across several lending markets, leaving bad debt behind and putting downward pressure on CRV. It was not a protocol failure, but it demonstrated a concentration risk specific to Curve: the token that governs emissions was also collateral for very large loans held by one person.

Who should use Curve

Anyone swapping stablecoins or liquid staking tokens in meaningful size will get the best price here. Liquidity providers who understand gauge mechanics and are prepared to manage a veCRV or Convex position can earn well. Casual users will find the interface genuinely difficult, and for small swaps an aggregator will route them to Curve anyway without requiring them to understand it.

FAQ

Is Curve safe after the 2023 hack?
The exploit came through a Vyper compiler bug affecting specific pool versions, not Curve's core invariant, and much of the value was returned. The protocol has operated without a comparable incident since, but the episode is why its security mark sits at 7 rather than 9.
Why is Curve cheaper for stablecoins?
Its StableSwap invariant keeps the price nearly flat across most of the curve for assets expected to trade at parity, so price impact on size is a fraction of a constant-product AMM's.
What is veCRV and do I need it?
veCRV is CRV locked for up to four years, granting governance weight over emissions and boosted rewards. Liquidity providers do not need it — many route through Convex to get the boost without locking — but it is central to how Curve's incentives work.
Curve or Uniswap for stablecoins?
Curve, in almost every case at size. On very small swaps the difference is dominated by gas, and an aggregator will pick whichever is cheaper for you.
#ServiceBest forCostScore
1UniswapDeep, dependable swaps on Ethereum and its L2s0.01–1% per pool, set by tier8.9
21inchCross-venue routing on EVM chainsNo protocol fee on classic swaps; resolvers price Fusion orders8.3
3JupiterBest-execution routing on SolanaNo protocol swap fee; you pay route costs and price impact8.2
4Curve FinanceLarge stablecoin and pegged-asset swaps~0.01–0.04% on stable pools8.1
5PancakeSwapBNB Chain liquidity and cheap retail swaps0.01–0.25% per pool8.1
6AerodromeBase-native liquidityVariable per pool, typically 0.01–0.3%7.8
7OrcaClean concentrated-liquidity provision on Solana0.01–0.3% by pool tier7.8
8VelodromeOptimism and Superchain liquidityVariable per pool, typically 0.01–0.3%7.6
9OsmosisCosmos ecosystem trading0.05–0.3% typical7.5
10BalancerCustom-weight pools and LST liquiditySet per pool, commonly 0.05–1%7.3
11RaydiumNew Solana token liquidity~0.25% standard pools, lower on concentrated7.2
12Trader JoeAvalanche liquidity and volatility-aware LPingDynamic bin fees, typically 0.05–0.8%7.2
13THORChainNative cross-chain swaps without wrappingDynamic slip-based fee, typically 0.1–1%7.0
14CamelotArbitrum launches and long-tail pairsDynamic, typically 0.1–0.6%6.9
15SushiSwapWide chain coverage on a familiar interface0.3% classic pools; lower on v3 tiers6.9