Curve’s March LlamaLend Exploit Left 27 Borrowers With Estimated 822,475 crvUSD Losses

An exploit in Curve Finance’s sDOLA/crvUSD LlamaLend market left 27 borrowers with estimated losses of 822,475 crvUSD, a lending-market incident separate from Curve’s decentralized exchange pools.

The attack occurred at about 11 p.m. ET March 1, 2026 (04:00 UTC March 2), at Ethereum block 24,566,937. It used a two-part flash loan to hard-liquidate positions in the market.

The liquidations involved 11,729,240 crvUSD in liquidated collateral value and 10,906,770 crvUSD in repaid debt. The estimated 822,475 crvUSD loss represents borrower equity seized through the liquidations, about 7% of the affected positions’ collateral value. The collateral and debt totals describe the liquidations; they are not additional estimates of borrower losses.

Curve later described addressing the affected borrowers through a fundraising gauge capped at five million CRV. The update did not specify how much was raised or distributed.