New contract with similar bytecode to exploit template

Evidence summary #

v1-deferred (P2). Curve's factory architecture produces thousands of pool deployments via deterministic CREATE2 — distinguishing exploit-template contracts from legitimate factory outputs requires dedicated bytecode-similarity monitoring. Not assessable at static dry-run.

Sources #

Methodology #

Detect whether a freshly deployed contract has high bytecode similarity to a known exploit template targeting this protocol class.

See the full factor methodology and distribution across all protocols →