Is crvUSD Safe?
Risk Grade: C+ (36/100)
crvUSD is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
crvUSD is one of the more innovative CDP stablecoins with real traction ($42M TVL). The soft liquidation mechanism is genuinely protective but borrowers should understand the whipsaw cost in volatile markets. The Curve ecosystem has a strong track record despite the 2023 exploit. Suitable for experienced DeFi users who want to borrow stablecoins with reduced liquidation risk.
crvUSD is a decentralized stablecoin created by Curve Finance, the largest stablecoin exchange in DeFi. Users can borrow crvUSD by depositing crypto collateral like ETH or BTC. Its key innovation is LLAMMA (Lending-Liquidating AMM Algorithm), which replaces the traditional all-or-nothing liquidation with a gradual soft liquidation. When your collateral price drops, LLAMMA slowly sells your collateral to protect the loan rather than liquidating everything at once. If the price recovers, it buys your collateral back. This reduces the risk of total loss from liquidation but can result in ongoing smaller losses during volatile markets.
TVL
$89M
Mechanisms
7
Interactions
4
Value Grade
C+
Key Risks for crvUSD Users
Soft liquidation sounds safe but can be costly: in choppy markets, your collateral is repeatedly sold low and bought high, potentially losing 10-30% of value
Curve suffered a $70M exploit in July 2023 from a compiler bug - while crvUSD was not directly affected, the incident shook confidence in the entire ecosystem
The stablecoin peg relies on automated Peg Keepers that can mint uncollateralized crvUSD - if this mechanism fails, the peg could break
Top Risk Factors
- •The LLAMMA soft liquidation mechanism, while innovative, can result in higher cumulative losses than traditional hard liquidation during volatile, choppy markets. The continuous sell-and-rebuy cycle generates repeated arbitrage losses for borrowers.
- •Curve Finance suffered a $70M exploit in July 2023 due to a Vyper compiler re-entrancy bug. While crvUSD contracts were not directly affected, the incident decimated CRV token price and nearly triggered a cascading liquidation of founder Michael Egorov's massive CRV-collateralized loans.
- •crvUSD's peg stability depends on arbitrage incentives and the Peg Keeper mechanism. During extreme market stress, if arbitrageurs withdraw or gas costs spike, the peg can drift significantly.
How crvUSD Compares to Peers
crvUSD ranks #11 of 25 CDP protocols (above-median). At a risk score of 36/100, it's in line with the sector average (37/100).
Adjacent peers: Reservoir Protocol (B-, 35/100) is ranked just safer, and Bucket CDP (C+, 36/100) is ranked just riskier.
See the full CDP sector leaderboard or the crvUSD vs Bucket CDP comparison.
Common Questions about crvUSD
Plain-English answers based on crvUSD's scores across Hindenrank's 8 risk dimensions. The highest-scoring (riskiest) dimension is Vitality Risk (7/10).
Has crvUSD ever been hacked or exploited?
crvUSD has a fairly clean operational history. The track record dimension scored 5/15, indicating minor or no significant incidents on record. A clean track record is a positive signal but it does not guarantee future safety, especially as protocol complexity grows.
How much money is at stake in crvUSD?
crvUSD currently holds roughly $89M in user deposits. Smaller TVL means individual depositors carry a larger share of any loss event, and it can be harder to exit a position quickly during stress.
What's the worst-case scenario for crvUSD?
Hindenrank has identified specific collapse scenarios for crvUSD. The most prominent: "LLAMMA Whipsaw Loss Cascade". The trigger condition is Extended period of high volatility with rapid price oscillations around soft liquidation bands for major collateral type (ETH or BTC). Reading through the full scenario list on the protocol page is the single best way to understand the actual failure modes — generic "smart contract risk" is rarely the thing that takes a protocol down.
Is crvUSD regulated or insured?
crvUSD has low regulatory exposure on Hindenrank's framework (2/10). The protocol is structured in a way that minimizes counterparty and jurisdiction concentration, though regulatory risk in crypto can change rapidly. No DeFi protocol carries FDIC-style insurance — even with low regulatory risk, depositors are not protected in the way bank customers are.
What are the biggest red flags for crvUSD?
Hindenrank's retail-focused risk audit flagged: Soft liquidation sounds safe but can be costly: in choppy markets, your collateral is repeatedly sold low and bought high, potentially losing 10-30% of value Curve suffered a $70M exploit in July 2023 from a compiler bug - while crvUSD was not directly affected, the incident shook confidence in the entire ecosystem The stablecoin peg relies on automated Peg Keepers that can mint uncollateralized crvUSD - if this mechanism fails, the peg could break
Should beginners deposit into crvUSD?
crvUSD's C+ grade puts it in the elevated-risk band. This is not a beginner-friendly protocol. Anyone depositing here should treat the position as speculative and avoid concentrating significant savings in it.
How does crvUSD compare to safer CDP alternatives?
crvUSD is one protocol in Hindenrank's CDP coverage. The safest CDP protocols on the leaderboard tend to share three traits: a long incident-free track record, conservative mechanism design, and high-quality public documentation. Compare crvUSD against the full CDP ranking before committing capital.
For the full 8-dimension score breakdown, the radar chart, and dependency graph, see the crvUSD risk report.
Read the Full crvUSD Risk Report
This protocol has 2 collapse scenarios. 1 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.