Curve DEX

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

Curve is a decentralized exchange built around stableswap pools that make trades between like-priced assets cheap. It held about $1.4B across thirteen chains at the 2026-08-14 survey. Its StableSwap invariant concentrates liquidity near parity, but an LP still sells the asset holding its peg and accumulates the one breaking it. The July 2023 Vyper reentrancy exploit also shows that audited, mature infrastructure can suffer pool-specific losses, though that incident is not the reason for this verdict. This is an AMM-class disposition, not an individually researched rejection: unavoidable inventory rebalancing and impermanent-loss exposure are dispositive for the advised sleeve.

Kill criteria: the events that revoke this verdict
• Ships a product line without impermanent-loss exposure that merits its own review

The research file

The mechanism

Curve’s StableSwap invariant blends constant-sum behavior near a target price with constant-product behavior farther away. That produces low slippage for correlated assets, but LP tokens remain pro-rata claims on pool inventory. Arbitrageurs trade against the pool as relative prices move, leaving LPs with more of the depreciating asset. Metapools and yield-bearing underlying tokens can add dependencies beyond the base pool.

Control and operating record

Curve includes both core deployments and permissionless factory pools; implementation, asset, oracle and admin assumptions therefore differ by pool. veCRV governance can change parameters and direct gauges, but governance cannot restore an external asset’s peg. On 30 July 2023, pools compiled with vulnerable Vyper versions were exploited via reentrancy. Curve governance later approved 71.77 million CRV of vesting compensation for affected LPs. That response is relevant evidence of operations, not proof that all pool implementations or assets share one risk profile.

The exit

LPs can remove liquidity in the supported coin mix, subject to pool balances, fees and transaction execution. During a depeg, the quoted LP-token value can conceal an adverse inventory mix; a one-coin exit can realize large slippage, while a balanced exit returns the impaired asset itself. Calling the loss impermanent does not make par recovery available on demand.

Why the class rule decides

The amm-lp rule excludes recommendations whose core return requires continuously making a two-sided market. Curve’s efficient math, long operating history and loss response do not change that client-level payoff. This is not an individual finding that Curve is unsafe. A Curve product with no AMM inventory exposure would require a separate memo and could reopen review.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Curve Finance — StableSwap white paper · primary · accessed 2026-08-14
  Supports: StableSwap invariant concentrates liquidity for pegged assets, LP return depends on automated market making
• Curve Metaregistry — pool and factory architecture · primary · accessed 2026-08-14
  Supports: pool, factory architecture
• Curve Governance — 2023 exploit LP compensation proposal · primary · accessed 2026-08-14
  Supports: 2023 exploit LP compensation proposal
• Curve contracts — audits and deployment process · primary · accessed 2026-08-14
  Supports: audits, deployment process

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.