Share this article

Convex Finance Bug Causes CVX Token to Sink on Forced Token Unlock

After a smart contract exploit, locked CVX tokens flooded the market, dragging down prices.

Updated May 11, 2023, 6:08 p.m. Published Mar 4, 2022, 10:06 p.m.
Convex users are battling through excess liquidity. (Jeff J Mitchell/Getty Images)
Convex users are battling through excess liquidity. (Jeff J Mitchell/Getty Images)

A smart contract bug has forced a team to prematurely unlock a huge portion of its token’s circulating supply, sending markets into disarray.

In a Twitter post Friday, the Convex Finance team wrote that it had redeployed the contracts responsible for the vote-locking governance mechanism after the discovery of a bug that would have granted certain users disproportionate rewards.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

“There were no instances of [the bug] being used prior to deployment of the new vlCVX contract. However, since Convex Finance contracts are immutable and non-upgradeable, a new contract had to be deployed. The new vlCVX contract has implemented a fix for this potential bug going forward,” the team wrote in a blog post.

It’s the latest example of the perilously experimental nature of decentralized finance (DeFi), a $200 billion industry where supply shocks, smart contract bugs and volatile prices are often the norm.

Convex’s vote locking mechanism is key to the project’s token economy, one that allows for users to collect “bribes” from protocols and direct liquidity deposits into another protocol, Curve Finance, but only if users lock their tokens for 16 weeks.

This mechanism plays a key part in the complex, multilayered battle to control voting power in another protocol’s token, Curve Finance’s CRV, colloquially known as the “Curve Wars.”

Read more: CRV Extends Rally as ‘Curve Wars’ Intensify

The vote locking mechanism also plays a key role in managing CVX’s circulating supply, with over 72% of the supply locked earlier on Friday. Frequent CVX traders often track major unlock dates, as they can lead to supply and price fluctuations.

As such, the sudden, unexpected unlock of millions of tokens has led to a significant supply shock on Friday.

Prices fell as much as 20% from $19.10 to $15.22 in a matter of hours.

However, large holders have stepped in to add to their positions, and many users have opted to re-lock their tokens rather than take the opportunity to sell, even during a time of macroeconomic uncertainty due to the war in Ukraine.

While volatile, prices have been rebounding throughout the afternoon, as CVX currently sits at $16.55, down 15% on the day.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Most Influential: Jesse Pollak

Jesse Pollack

Base, the layer-2 network incubated by Coinbase, exploded in popularity this year.