Curve Founder Calls for DeFi Safety Standards Amid Hacking Surge

robot
Abstract generation in progress

Michael Egorov, founder of Curve Finance, publicly raised concerns about structural vulnerabilities in the DeFi industry on April 21, 2026, stating that “preventable hacks” stemming from centralized single points of failure are damaging industry trust and cannot be ignored any longer.

Recent DeFi Incident and Responsibility Concerns

On April 18, Kelp DAO’s cross-chain bridge vulnerability was exploited, resulting in the theft of approximately 116,500 rsETH (restaked Ethereum), valued at approximately $292 million. LayerZero handled the cross-chain movement in this incident. Following the attack, major DeFi lending protocols including Aave froze the rsETH market and restricted related deposits and borrowing.

Egorov criticized the interconnected nature of multiple infrastructure components—Aave, rsETH, and LayerZero—and the resulting structure that diffuses accountability. He noted that “despite users being unable to withdraw their assets, each project claims to be operating normally,” emphasizing that “ultimately, only users bear the losses.”

Proposed Solutions: Prevention Over Response

Egorov argued that addressing these issues requires prevention rather than post-incident response. He advocated for:

  • Reducing single points of failure in DeFi infrastructure
  • Designing systems that distribute trust when centralized solutions are unavoidable
  • Sharing best practices across the industry
  • Strengthening code verification standards

Industry-Wide Safety Standards and Governance

Egorov called for collaborative action across the DeFi sector to establish safety standards applicable to the entire industry. He proposed that projects, auditors, and risk assessment groups work together to establish safe design principles and verification criteria.

He further suggested that major ecosystem institutions—specifically the Ethereum Foundation and Solana Foundation—should take the lead in establishing industry standards. Egorov also referenced the need to learn from traditional finance’s risk management approaches.

Warnings on Adoption and Trust

While expressing confidence that “DeFi will ultimately prevail,” Egorov warned that failure to address current structural vulnerabilities could result in serious erosion of trust during the path to mainstream adoption.

CRV3.93%
ETH-0.61%
ZRO1.31%
AAVE-0.69%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 14
  • 14
  • Share
Comment
Add a comment
Add a comment
EbbShellLedger
· 04-23 06:39
It's too costly to discuss standards only after major hacks happen. I hope prevention can become the industry default setting.
View OriginalReply0
RationalRugChecker
· 04-22 19:42
The biggest pain point in DeFi is actually "the cascading risk caused by composability," where one flaw can propagate a chain reaction, requiring more systematic risk control.
View OriginalReply0
SlippageAfterTheRain
· 04-21 10:15
Collaboration security standards + accountability mechanisms are very important; otherwise, users will just continue to use centralized hosting for convenience.
View OriginalReply0
GasFeesAfterTheRain
· 04-21 09:46
Who should set the standards? The foundation, the auditing firm, or the protocol alliance? Don't let it end up with everyone doing their own thing again.
View OriginalReply0
ChaintraceAuntie
· 04-21 05:55
That's right, safety must come before growth.
View OriginalReply0
0XNightRun
· 04-21 05:51
Accountability sounds good, but how can anonymous on-chain teams be implemented? At least make permissions, delays, and emergency procedures open and transparent.
View OriginalReply0
NonceNomad
· 04-21 05:49
I would prefer to see the upfront security budget: higher bug bounties, continuous monitoring, formal verification before launch—don't rely solely on a single audit.
View OriginalReply0
BetaTestHuman
· 04-21 05:41
Can we establish "Accident Review Standards" and "Safety Ratings" similar to traditional industries? So that ordinary users can easily understand the risks at a glance.
View OriginalReply0
OrigamiMountainsAndRivers
· 04-21 05:38
Restoring trust depends on two points: the compensation mechanism and ongoing transparency. When an issue occurs, disclose immediately, review, and improve—don't delay.
View OriginalReply0
GateUser-3d750846
· 04-21 05:32
I support industry-level security alliances, but we must prevent being hijacked by large projects' rules; small teams should also have channels for participation and appeals.
View OriginalReply0
View More
  • Pin