Onekey founder speaks out to Curve for rights protection, demanding a fair resolution on the Resupply vulnerability incident

BlockBeats News, June 27, Onekey founder Yishi posted an article on the "Curve Ecosystem DeFi Protocol Resupply Suffers Price Manipulation Attack Loss of $9.6 Million," demanding that Curve provide a fair solution for every investor and return user funds lost due to the project's error.

Yishi stated that he is one of the three major investors in Resupply, and the attack event this time involved a loss of millions of dollars, which not only caused significant financial losses but also brought immense psychological pressure. His main position for safeguarding rights is that many investors, including himself, made large investments based on Resupply's perceived credibility by Curve. The loss this time was not caused by market fluctuations or bad debt events but by a technical failure—the ERC4626 inflation vulnerability. The reason was that the team failed to destroy the initial allocation when deploying the new treasury. The Resupply team shifting the loss to the insurance pool depositors lacks a sense of responsibility. The purpose of the insurance pool is to cover black swan events and market risks, not internal negligence. The Resupply team also did not preemptively state in the protocol that the insurance pool could cover losses caused by team errors. Curve and crvusd have derived substantial benefits from Resupply, and they should not be allowed to escape. This vulnerability is not a market issue but a design and deployment flaw, and the responsibility lies with the team, not the users. Convex or Yearn's treasury should share the responsibility.

This morning, Curve Finance released a statement on this security incident, "While Resupply was not developed by Curve developers, the creators of Resupply are of outstanding ability and rich experience. We believe they will do their utmost to resolve this issue. The affected Resupply insurance pool is designed to provide protection against such security events. If it can be restored, this should be a top priority and will help reduce the overall impact of such events."