A review of Curve DEX's protocol upgrade compatibility identified several risks, including storage-slot collisions in new pool factories and improper initializer patterns. A potential governance-delay bypass exists through emergency pausing, and a re-entrancy window was found on L2-to-L1 message finality. While the protocol is fundamentally sound, these gaps could be exploited during upgrades, posing a medium-high aggregate risk to the protocol's substantial TVL.
Read the full article at DEV Community
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.



