C

    Curio Hack:$16M Stolen

    March 23, 2024 · Ethereum

    Reported loss$16Msource: DeFiLlama
    Traced by ChainHint$96.9K(0.6% of reported)from 0xdaaa6294c47b5743bdafe0613d1926ee27ae8cf5

    Reported by DeFiLlama

    As of 2026-11-08 14:18 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.

    Estimated Loss$16M
    ChainEthereum
    DateMarch 23, 2024
    Attack typeContract exploit

    Attacker address

    Not verified

    0xdaaa6294c47b5743bdafe0613d1926ee27ae8cf5

    ChainHint has not checked this address against a published source and the exploit transaction, so it is shown as on record, not as the attacker. DeFiLlama carries no attacker addresses.

    Traced by ChainHint — Traced Outflow

    $96.9Ksent out by the traced address · followed to 49 endpoints

    86 nodes · 386 edges

    Traced from an address ChainHint has not verified as the attacker's.

    Largest destinations: Savings Dai — as labelled in our database; not all of these labels are verified.

    In ChainHint's incident archive

    No earlier incident at Curio is recorded in our archive.

    Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $264M in total, among the incidents ChainHint lists.

    Curio hack: the facts

    How much was stolen in the Curio hack?
    DeFiLlama reports $16M stolen from Curio on ethereum.
    Who was hit in the Curio hack?
    Curio, on ethereum, on March 23, 2024. Attack type: contract exploit.
    Where did the Curio funds go?
    ChainHint traced $96.9K sent out by the traced address, and followed it to 49 endpoints, including Savings Dai (as labelled; not all labels are verified).

    Related hacks

    All hacks →

    Investigate your own incident

    Trace the path of funds across 12 chains on public blockchain data.