Curve DEX

Curve is the leading DEX for stablecoin and pegged-asset swaps, designed around the “stableswap” invariant - a hybrid AMM curve that behaves like a constant-sum (flat price) trader near the peg and switches to constant-product (sloped) only as the pool moves away from balance. The result is dramatically lower slippage and lower impermanent loss for assets that are expected to trade close to parity: stablecoin pairs (USDC/USDT/DAI), ETH/stETH, BTC/WBTC/cbBTC, and similar. Liquidity providers in these pools typically earn 1-10% APY from base trading fees, plus reward emissions in CRV and partner tokens via “gauges” voted on by veCRV holders.

The vote-escrowed governance (veCRV) is the single most-replicated mechanic in DeFi. Locking CRV for up to four years grants both governance power and a boost on LP rewards in pools you’ve voted for; this creates a permanent flywheel where protocols seeking deep liquidity pay (in their own tokens) to acquire CRV votes, often via aggregators like Convex. The “Curve Wars” - protocols competing for veCRV influence - peaked in 2022 but the mechanism is still active and produces persistent incentives for liquidity to migrate toward pools with the highest gauge-weighted emissions.

Curve has run since 2020 with extensive audits (Trail of Bits, MixBytes, Quantstamp, ChainSecurity) and one notable exploit: the July 2023 Vyper compiler bug that drained four pools of approximately $73M. The bug was at the language level rather than in Curve’s logic; affected pools were compensated through governance and Vyper was patched. The protocol’s broader risk surface is unusually well-tested: stablecoin depegs (USDC March 2023), oracle manipulation attempts on smaller pools, and partner-token failures have all happened without contagion to the core stableswap pools.