Metronome: The msETH-ETH pool on Curve has been attacked and mainnet functionality has been temporarily suspended.

Odaily News: DeFi synthetic asset protocol Metronome has announced that as a precautionary measure, the functionality of the Metronome mainnet has been temporarily suspended in order to minimize damage and investigate the best course of action going forward. Metronome has revealed that a vulnerability involving multiple Curve pools has been exploited, leading to an attack on the msETH-ETH pool, resulting in the theft of funds from the pool. Liquidity providers for any msUSD trading pairs and users utilizing msETH on Optimism on Velodrome should take note that their positions are not affected. Furthermore, all deposits and open positions in Metronome are unaffected by this incident. As previously reported, the Curve stablecoin pool comprising alETH/msETH/pETH was attacked due to a recursive locking vulnerability in certain versions (0.2.15, 0.2.16, and 0.3.0) of Vyper. According to PeckShield monitoring, as of now, DeFi lending protocol Alchemix, DeFi public product JPEG'd, DeFi synthetic asset protocol Metronome, cross-chain bridge deBridge, BNB Chain's DEX Ellipsis utilizing the Curve mechanism, and the Curve CRV-ETH trading pair have all been attacked, resulting in an estimated loss of approximately $52 million.