On June 27, Onekey founder Yishi spoke out about the "Curve ecosystem DeFi protocol Resupply being price-manipulated, resulting in a loss of $9.6 million", demanding that Curve provide a fair solution for every investor and return the user funds lost due to project team errors.
Yishi stated that he is one of the three major investors in Resupply, and this attack event involved millions of dollars in losses, causing not only significant economic damage but also enormous psychological pressure. His main stance for rights protection is: Many investors, including himself, made large investments based on Resupply's perceived credibility with Curve; the loss was not caused by market fluctuations or bad debt events, but by a technical failure - an ERC4626 inflation vulnerability, resulting from the team's failure to destroy initial shares when deploying a new vault; the Resupply team's transfer of losses to insurance pool depositors lacks responsibility, as the insurance pool's purpose is to cover black swan events and market risks, not internal negligence, and the Resupply team had not previously indicated that the insurance pool could cover losses caused by team errors; Curve and crvusd gained substantial benefits from Resupply and should not be allowed to abandon responsibility, as the vulnerability was a design and deployment defect for which the team, not users, is responsible, and Convex or Yearn's treasury should share the responsibility.
This morning, Curve Finance issued a statement about this security incident, "Although Resupply was not developed by Curve developers, the Resupply creators are highly capable and experienced, and we believe they will do their utmost to resolve this issue. The affected Resupply insurance pool is intended to provide protection for such security events. If recovery is possible, this should be a priority and will help reduce the overall impact of such incidents."