Vulnerabilities can be found in the PoolFactoryv1 version of the CurveFinance fund pool

Curve Finance tweeted that the negative effects found in the factory version v1 fund pool encouraged v1 users to withdraw their funds immediately using crv.finance. The pool investments of Curve.fi and Pool Factory v2 are not affected. The team also said that the downsides are heavy, but only affect the v1 pool and cannot be used by thieves to steal users' money.