Curio Hack:$16M Stolen
March 23, 2024 · Ethereum
Reported by DeFiLlama
As of 2026-11-08 14:18 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.
Attacker address
0xdaaa6294c47b5743bdafe0613d1926ee27ae8cf5
ChainHint has not checked this address against a published source and the exploit transaction, so it is shown as on record, not as the attacker. DeFiLlama carries no attacker addresses.
Traced by ChainHint — Traced Outflow
$96.9Ksent out by the traced address · followed to 49 endpoints
86 nodes · 386 edges
Traced from an address ChainHint has not verified as the attacker's.
Largest destinations: Savings Dai — as labelled in our database; not all of these labels are verified.
In ChainHint's incident archive
No earlier incident at Curio is recorded in our archive.
Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $264M in total, among the incidents ChainHint lists.
Curio hack: the facts
- How much was stolen in the Curio hack?
- DeFiLlama reports $16M stolen from Curio on ethereum.
- Who was hit in the Curio hack?
- Curio, on ethereum, on March 23, 2024. Attack type: contract exploit.
- Where did the Curio funds go?
- ChainHint traced $96.9K sent out by the traced address, and followed it to 49 endpoints, including Savings Dai (as labelled; not all labels are verified).
Related hacks
All hacks →
Notional V2Contract exploit · also on Ethereum · September 4, 2026$1.73M
TermFinance VaultsContract exploit · also on Ethereum · August 23, 2026$8.5M
CoinsbuyContract exploit · also on Ethereum · August 9, 2026$7.9M
Lazy Summer ProtocolContract exploit · also on Ethereum · July 5, 2026$6.04M
Thetanuts FinanceContract exploit · also on Ethereum · June 15, 2026$2.1M
Investigate your own incident
Trace the path of funds across 12 chains on public blockchain data.