Skip to content
Crypto Almanac Daily
C
Dex

Curve DEX

Best for audited, multi-chain deployment

Total value locked:$1,295m at this checkChains:31Audits recorded:2Audit report linked:YesRubric:v2.0 · verified 9 Aug 2026
Kayla PetersonKayla PetersonDeFi Research Analyst· Last verified August 9, 2026
Confidence ARubric v2.0Verified August 9, 2026
9.6
out of 10
Open account
Scorecard

How it rates

Counterparty & contract risk · 30%10.0
Cost transparency · 20%9.0
Market quality · 25%9.0
Transparency & track record · 15%10.0
Public documentation surface · 10%10.0
Pros
  • Audit report linked from a public dataset
  • Documentation published at a public address
  • Deployed across 31 chains
Cons
  • Several indicators could not be verified from public sources at this check
How this score was built

Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.

Counterparty & contract risk · 30% weight10/10 points · 10.0/10
Cost transparency · 20% weight9/10 points · 9.0/10
  • Met
    Documentation published where fees are described

    Documentation reachable for fee review.

    docs.curve.finance/
  • Met
    Application reachable without an account

    No account required to reach the app.

    curve.finance
  • Met
    Independent dataset publishes protocol economics

    TVL and change history published independently.

    defillama.com/protocol/curve-dex
  • Partial
    Fee model documented publicly

    Documentation available; specific fee tiers not captured at this check.

    docs.curve.finance/
  • Met
    No account required to read protocol documentation

    Open documentation.

    docs.curve.finance/
Market quality · 25% weight9/10 points · 9.0/10
Transparency & track record · 15% weight10/10 points · 10.0/10
Public documentation surface · 10% weight10/10 points · 10.0/10

The standard venue for trading between similar assets, using the stableswap invariant across 31 chains, with $1.30bn locked and linked audit reports.

Our assessment

Curve is where you trade one dollar-pegged asset for another, or one staked-ETH derivative for another, with minimal slippage. Its stableswap invariant is a different piece of mathematics from a constant-product AMM, and it holds $1.30bn across 31 chains at this check.

Why the maths matters

A constant-product AMM prices two assets as if they could diverge infinitely, which is wrong when both are meant to be worth a dollar. Stableswap concentrates liquidity near parity and only behaves like a normal AMM when the peg breaks. That single design choice is why almost all stablecoin routing in DeFi passes through Curve.

The July 2023 Vyper exploit

Several pools were drained after a reentrancy vulnerability in specific versions of the Vyper compiler — not in Curve's own contracts. Roughly $70m was taken and a substantial portion was later returned. It remains one of the clearest demonstrations that a protocol's security includes the tools it was compiled with, and it belongs in any honest assessment.

Governance is the other thing to understand

veCRV vote-escrow locks tokens for up to four years in exchange for voting power over emissions, which created an entire market in buying that influence. It aligns long-term holders and concentrates decision-making among those able to lock capital for years. Both effects are real.

Who it suits

Curve fits anyone swapping between stablecoins or between staking derivatives, and liquidity providers who want minimal divergence exposure. Volatile pairs belong on Uniswap or PancakeSwap.

Alternatives

How rivals compare

ServiceScoreBest for
Uniswap V39.8audited, multi-chain deploymentRead →
PancakeSwap AMM9.6audited, multi-chain deploymentRead →
Reference

Frequently asked

Does this score mean Curve DEX is safe to use?

No. It measures what an outsider can verify: linked audits, published documentation and independently recorded market data. Contract behaviour is not tested by us.

Where does the TVL figure come from?

An independent public analytics platform, queried at the verification date. Anyone can re-run the same query.

Why do some protocols score zero on audits?

Because no audit report is linked in the public dataset. It records what a user can reach, not a claim that no audit was ever performed.