Convex Finance

Convex Finance receives a B- risk grade (34/100) from Hindenrank, where lower scores indicate lower risk. Convex Finance is a battle-tested yield protocol with a dominant market position in the Curve ecosystem. However, its governance concentration risks, one-way cvxCRV lock, and dependency on Curve's continued relevance are meaningful concerns. The March 2022 bug and June 2025 downstream Resupply exploit (fully repaid) show ongoing smart contract risk in the ecosystem. Best suited for DeFi-native users who understand the Curve/Convex governance dynamics. Convex Finance is a yield optimization platform built on top of Curve Finance. It lets you earn boosted Curve rewards without needing to lock CRV tokens for 4 years yourself. By aggregating CRV deposits from thousands of users, Convex maximizes the boost for everyone. Convex controls about 50% of all locked CRV, making it the most powerful player in the 'Curve Wars' — the competition to direct Curve's token emissions. The Resupply $9.5M exploit (June 2025) was fully repaid by Resupply using treasury and insurance funds.

The key risks identified for Convex Finance are: (1) CRV deposited into Convex (as cvxCRV) is locked forever and can only be sold on the open market, potentially at a loss (2) Convex's dominance over Curve governance creates systemic risk — a Convex failure could destabilize Curve's entire ecosystem (3) CVX token ownership is highly concentrated, meaning a few large holders control most of the governance power

Convex Finance scores 34/100 across eight risk dimensions: Mechanism Novelty: 3/15, Interaction Severity: 8/20, Oracle Surface: 1/10, Documentation Gaps: 2/10, Track Record: 5/15, Scale Exposure: 7/10, Regulatory Risk: 2/10, Vitality Risk: 6/10. The highest risk area is Scale Exposure at 7/10.

Among 116 rated Yield protocols on Hindenrank, Convex Finance ranks #44 by safety (lowest risk score = safest). Its 34/100 risk score and B- grade place it in the middle tier of Yield protocols.

Convex Finance scores 5/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.