OneKey Founder Questions Resupply’s Evasion of Responsibility, Urges Curve to Compensate Users for Losses Caused by Vulnerability

Odaily Planet Daily reported that OneKey founder Yishi has publicly commented on the “Curve ecosystem DeFi protocol Resupply suffering a $9.6 million loss due to a price manipulation attack,” demanding that Curve provide a fair solution for every investor and return user funds lost due to the project team’s serious technical errors.
Yishi revealed that he is one of the three major investors in Resupply and suffered millions of dollars in losses in this incident. He accused the team of banning reasonable critics in Discord and lacking proper accountability. He emphasized that the vulnerability stemmed from the failure to burn initial shares during the deployment of the ERC4626 vault, allowing attackers to mint unlimited shares at almost zero cost and drain the vault, which constitutes a protocol-level design and deployment error. Yishi stated that shifting the losses onto insurance pool depositors is unjustified, as the insurance pool is meant for black swan events and market volatility, not to cover for the team’s technical negligence. He also pointed out that Curve, Convex, and Yearn had supported Resupply in various ways and benefited from it, so they should not shirk responsibility after the fact. He called on the relevant parties to bear the necessary consequences and return user assets. In response to the incident, Curve stated this morning, “Although Resupply was not developed by the Curve team, its creators are experienced, and we believe they will do their best to address the issue. The insurance pool is designed to provide protection for such security incidents, and if assets can be recovered, that should be prioritized.”