Share this article

DeFi Protocol Conic Finance Hacked for 1,700 Ether

Security firm BlockSec said that the root cause of the attack was price manipulation caused by "read-only reentrancy."

Jul 21, 2023, 2:04 p.m.
Conic Finance was drained of 1,700 ether. (Kevin Ku/Unsplash)
Conic Finance was drained of 1,700 ether. (Kevin Ku/Unsplash)

Decentralized finance (DeFi) protocol Conic Finance said Friday that it had suffered an exploit that allowed an attacker to grab over 1,700 ether , worth over $3.6 million at current prices, that affected one of its Omnipools.

Security firm BlockSec said that the root cause of the attack was price manipulation caused by "read-only reentrancy." Reentrancy is a common bug that allows attackers to trick a smart contract by making repeated calls to a protocol in order to steal assets. A call is an authorization for the smart contract address to interact with a user’s wallet address.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Conic Finance, which went live on March 1, allows users to deposit tokens into its Omnipools, a new product that diversifies exposure across the Curve ecosystem while increasing rewards. The protocol attracted millions of dollars in capital shortly after going live, suggesting huge demand for such a product.

Each Omnipool allocates liquidity of a single asset into different Curve pools. All Curve liquidity provider (LP) tokens get staked on Convex to boost Curve (CRV) rewards earnings. Convex (CNX), another Curve ecosystem token, is also rewarded, as is Conic (CNC), Conic’s native token.

Meanwhile, Conic Finance developers tweeted that they were continuing to investigate the root cause of the exploit and were consulting with relevant parties.

The developers added that they had closed the faulty pool that apparently allowed the hack to take place. "We have disabled ETH Omnipool deposits on the Conic front end," they wrote.

More For You

Pudgy Penguins: A New Blueprint for Tokenized Culture

Pudgy Title Image

Pudgy Penguins is building a multi-vertical consumer IP platform — combining phygital products, games, NFTs and PENGU to monetize culture at scale.

What to know:

Pudgy Penguins is emerging as one of the strongest NFT-native brands of this cycle, shifting from speculative “digital luxury goods” into a multi-vertical consumer IP platform. Its strategy is to acquire users through mainstream channels first; toys, retail partnerships and viral media, then onboard them into Web3 through games, NFTs and the PENGU token.

The ecosystem now spans phygital products (> $13M retail sales and >1M units sold), games and experiences (Pudgy Party surpassed 500k downloads in two weeks), and a widely distributed token (airdropped to 6M+ wallets). While the market is currently pricing Pudgy at a premium relative to traditional IP peers, sustained success depends on execution across retail expansion, gaming adoption and deeper token utility.

More For You

MegaETH mainnet to go live Feb. 9 in major test of ‘real-time’ Ethereum scaling

(MegaLabs)

This follows its October 2025 $450 million token sale that was heavily oversubscribed.

What to know:

  • MegaETH, the much-watched high-performance Ethereum layer-2 network, announced that its public mainnet will go live Feb. 9, marking a major milestone for a project that has gained a lot of attention in the scaling landscape.
  • MegaETH positions itself as a “real-time” blockchain for Ethereum, designed to deliver ultra-low latency and massive transaction throughput.