Have we learned anything from Curve Finance and DeFi’s susceptibility to attacks?
Curve Finance attack highlights the problem of limited expressivity and resources in Web3 development environments. The attack was not a hack, but an exploit. Curve Finance's Vyper code is severely limited in its ability to express complexity beyond relatively simple transaction logic. This makes it hard for anyone to design security measures that would prevent this or any other attacks. The current Web3 ecosystems can not support something like on-chain risk analysis solution.