shield Slippage Abuse · $36K loss

Forensic report: CurveBurner slippage abuse cost $36K (August 2023)

On August 2023, CurveBurner was exploited in a slippage abuse, resulting in approximately $36K in losses. That makes the CurveBurner exploit the 289th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the CurveBurner Slippage Abuse Played Out

Exploit Class Applied to CurveBurner

The CurveBurner incident on August 2, 2023 is classified as a Slippage Abuse. Unprotected swap routes let the attacker extract value through sandwich trades or price drift. In the full archive, CurveBurner is 1 of 13 documented slippage abuse incidents.

CurveBurner in Context

At $36K, the CurveBurner exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — DCFToken (2025) at $442K.

Prior Slippage Abuse Before CurveBurner

The nearest slippage abuse incident before CurveBurner was NewFi, 16 days earlier on July 17, 2023 ($31K lost). The same exploit class surfaced again within the slippage abuse attack surface.

CurveBurner Vulnerability Signature

The primary source categorises the CurveBurner exploit specifically as “Lack Slippage Protection”. This narrower label is entity-specific: it reflects how the CurveBurner contract failed, rather than the broad slippage abuse pattern alone.

Impact & Recovery for CurveBurner

CurveBurner Loss Figure

The CurveBurner exploit caused $36,000 in losses — a minor (<$1M) incident and the 109th largest of 214 documented in 2023.

Where CurveBurner Sits Among Slippage Abuse Attacks

Ranked by loss size, CurveBurner is the 4th largest of 13 slippage abuse incidents documented. That puts the CurveBurner loss below the class average of $119.9K.

Timeline Since the CurveBurner Incident

The CurveBurner exploit occurred 2.7 years ago (986 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for CurveBurner

Public post-mortem / on-chain analysis for the CurveBurner incident: view source.

FAQ

How much did CurveBurner lose?

The CurveBurner exploit in August 2023 resulted in $36,000 in losses — the 109th largest of 214 DeFi incidents that year.

When did the CurveBurner hack happen?

The CurveBurner exploit was recorded on August 2, 2023 — 986 days ago.

What type of exploit hit CurveBurner?

The CurveBurner incident is classified as a Slippage Abuse. Unprotected swap routes let the attacker extract value through sandwich trades or price drift.

How common is the Slippage Abuse pattern seen at CurveBurner?

Our archive contains 13 documented slippage abuse incidents. The CurveBurner incident is one of them.

How does CurveBurner compare to the largest Slippage Abuse attack?

The largest slippage abuse incident in our archive is DCFToken (2025) at $442K. The CurveBurner loss is $36K.

Why were specific stock indices selected for the study?

Selected indices represent major affected countries and areas, providing a comprehensive view of the impact.

Explain the main security concerns in traditional data sharing models of the IIoT addressed by the BBDSPP scheme.

The BBDSPP scheme addresses complexities, inflexibility, and security concerns in traditional IIoT data sharing models.