Curve DEX
DEX & AMMs · Ethereum · Base · Arbitrum
Verdict Rating
“Protection is solid, with one liquidity condition that keeps the score below the top band.”
Rubric Breakdown
| Area | Score | Weight |
|---|---|---|
| Depositor Protection | 66 | 40% |
| Market Stress | 50 | 25% |
| Exit & Liquidity | 57 | 15% |
| Safety Assist | 68 | 20% |
Area scores
Test Evidence
Scenario Results
Open a scenario for its setup and recorded result.
Frontal Drain!Degraded
Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.
Recorded result. Common attack classes tested against the contracts.
- Fork block
- Ethereum - block 24877000
- Reproduction script
- Not published for this report.
Pole Test!Degraded
Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.
Recorded result. Privileged key and upgrade path reviewed.
- Fork block
- Ethereum - block 24877000
- Reproduction script
- Not published for this report.
Side Impact✕Failed
Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.
Recorded result. Oracle stress and flash-loan price impact tested.
- Fork block
- Ethereum - block 24877000
- Reproduction script
- Not published for this report.
Rollover✕Failed
Setup. The main collateral or stablecoin depegs to 0.80 for six hours.
Recorded result. Collateral depeg and liquidation path reviewed.
- Fork block
- Ethereum - block 24877000
- Reproduction script
- Not published for this report.
Rear Impact✕Failed
Setup. 30% of TVL is withdrawn within 24 hours by many addresses.
Recorded result. Exit queue and stressed withdrawal tested.
- Fork block
- Ethereum - block 24877000
- Reproduction script
- Not published for this report.
Findings
- Market Stress is the limiting area at 50/100 and sets the rating.
- 0 of five reviewed scenarios held; 5 recorded a degraded or failed result.
- The reviewed deployment spans Ethereum, Base, Arbitrum and carries an overall weighted score of 61/100.
- The report covers the tested contracts only; integrations outside that scope are not included.
Visual record
Five scenarios.
One verdict.
Verified Resources
Limitations of Assessment
- Scores reflect the deployment and chain set reviewed for this report.
- On-chain metrics are measured at the test block and may move after publication.
- The report covers the tested contracts, not integrations outside that scope.
Member Reports
Test History
| Report | Tested | Version | Stars |
|---|---|---|---|
| CR-1022 | 13 Oct 2026 | v2.0.0 | 2 / 5 |
Protocol badge
Embed this rating on the protocol site. The badge links back to this report.
<a href="https://bulwarkproof.tech/ratings/curve-dex/"><img src="https://bulwarkproof.tech/badge/curve-dex.svg" alt="BULWARK safety rating: Curve DEX, 2 of 5 stars" width="320" height="112"></a>BULWARK · Tested · Unbuyable · Re-tested