Cryptocurrency [loss] $16M+

"Hacker mints 1B tokens in $16M Curio smart contract exploit"

2024-03-25 [vendor] Curio [chain] ethereum
Primary Source ↗
Financial Loss $16.0M (16,000,000 USD)
Blockchain(s) Ethereum

Incident Details

Curio, a crypto project that creates tokens based on “real-world assets” (RWAs) like cars, watches, wine, and other goods, has suffered an attack that saw around $16 million drained from the project’s funds.A bug in the project’s Ethereum smart contract enabled an attacker to mint 1 billion of the project’s CGT governance token. Although the tokens were notionally priced at around $40 million, the loss to the project was estimated at closer to $16 million.Curio DAO announced that they intended to compensate users affected by the theft over a year-long period.

Total loss estimated at $16,000,000.

Technical Details

Initial Attack Vector
Smart contract exploit / hack
Vendor / Product
Curio

Timeline

  1. 2024-03-25 Breach occurred
  2. 2024-03-25 Publicly disclosed