Is Convex Finance Safe?
Risk Grade: B- (34/100)
Convex Finance is rated as moderate risk — some novel mechanisms, generally well-understood.
Convex Finance is a battle-tested yield protocol with a dominant market position in the Curve ecosystem. However, its governance concentration risks, one-way cvxCRV lock, and dependency on Curve's continued relevance are meaningful concerns. The March 2022 bug and June 2025 downstream Resupply exploit (fully repaid) show ongoing smart contract risk in the ecosystem. Best suited for DeFi-native users who understand the Curve/Convex governance dynamics.
Convex Finance is a yield optimization platform built on top of Curve Finance. It lets you earn boosted Curve rewards without needing to lock CRV tokens for 4 years yourself. By aggregating CRV deposits from thousands of users, Convex maximizes the boost for everyone. Convex controls about 50% of all locked CRV, making it the most powerful player in the 'Curve Wars' — the competition to direct Curve's token emissions. The Resupply $9.5M exploit (June 2025) was fully repaid by Resupply using treasury and insurance funds.
TVL
$607M
Mechanisms
7
Interactions
5
Value Grade
C
Key Risks for Convex Finance Users
CRV deposited into Convex (as cvxCRV) is locked forever and can only be sold on the open market, potentially at a loss
Convex's dominance over Curve governance creates systemic risk — a Convex failure could destabilize Curve's entire ecosystem
CVX token ownership is highly concentrated, meaning a few large holders control most of the governance power
Top Risk Factors
- •Convex controls ~50% of veCRV voting power, creating systemic Curve governance centralization risk
- •Smart contract bug history (March 2022 vote-lock bug) and downstream exploit exposure (June 2025 Resupply $9.5M, fully repaid by mid-2025)
- •73% of CVX supply held by top wallets amplifies governance capture and price manipulation risk
How Convex Finance Compares to Peers
Convex Finance ranks #44 of 116 Yield protocols (above-median). At a risk score of 34/100, it's 3 points safer than the sector average of 37/100.
Adjacent peers: Spark Liquidity Layer (B-, 33/100) is ranked just safer, and Gain (B-, 34/100) is ranked just riskier.
See the full Yield sector leaderboard or the Convex Finance vs Gain comparison.
Common Questions about Convex Finance
Plain-English answers based on Convex Finance's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Scale Exposure (7/10).
Has Convex Finance ever been hacked or exploited?
Convex Finance has a fairly clean operational history. The track record dimension scored 5/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in Convex Finance?
Convex Finance currently holds more than $607M in user deposits. A protocol of this size typically has deeper liquidity, more eyes on the code, and more attention from auditors — but it also means a single failure has a much larger blast radius.
What's the worst-case scenario for Convex Finance?
Hindenrank has identified specific collapse scenarios for Convex Finance. The most prominent: "CVX Governance Capture Redirecting Curve Emissions". The trigger condition is A well-funded attacker or colluding whale group accumulates sufficient CVX to control >51% of vlCVX voting power, redirecting Curve's CRV emissions to attacker-controlled pools. Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is Convex Finance regulated or insured?
Convex Finance has low regulatory exposure on Hindenrank's framework (2/10). The protocol is structured in a way that minimizes counterparty and jurisdiction concentration, though regulatory risk in crypto can change rapidly. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for Convex Finance?
Hindenrank's retail-focused risk audit flagged: CRV deposited into Convex (as cvxCRV) is locked forever and can only be sold on the open market, potentially at a loss Convex's dominance over Curve governance creates systemic risk — a Convex failure could destabilize Curve's entire ecosystem CVX token ownership is highly concentrated, meaning a few large holders control most of the governance power
Should beginners deposit into Convex Finance?
Convex Finance is rated B-, which is acceptable for users who understand the protocol's mechanism. Beginners should read the full risk breakdown and only deposit after they can articulate the top three failure modes. If you cannot explain how the protocol works, do not deposit.
How does Convex Finance compare to safer Yield alternatives?
Convex Finance is one protocol in Hindenrank's Yield coverage. The safest Yield protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare Convex Finance against the full Yield ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the Convex Finance risk report.
Read the Full Convex Finance Risk Report
This protocol has 2 collapse scenarios. 3 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.