Is Curve safe to use?
Is Curve itself safe?
Yes — the real Curve is a well-known stablecoin DEX on Ethereum. The danger is almost never the protocol itself; it's fake copies of it and the signatures malicious sites ask you to approve. The only official domain is curve.finance.
The real risk: fake Curve sites
Scammers clone the Curve interface pixel-for-pixel on look-alike domains, then buy ads and post links so their fake ranks above the real one. Connecting a wallet there and signing hands an attacker control of your tokens.
How to use Curve safely
- Reach Curve only from a bookmark of curve.finance — never from search ads or DMs.
- Check the domain character by character; watch for extra words like “app-”, “-claim” or swapped letters.
- Read every signature request. A swap is a swap — if it asks for
setApprovalForAllor an unlimited approval you didn't expect, reject it. - Revoke old token approvals periodically.
- Use a security extension that blocks fake Curve domains and decodes signatures for you.
A safe swap in one sentence
Right domain, understood signature, reasonable approval amount — if all three are true, you're on solid ground. Trust Line checks all three automatically.
FAQ
Is curve.finance the real Curve?
Yes, curve.finance is the official Curve domain. Any other domain claiming to be Curve should be treated as a phishing clone.
Can Curve steal my funds?
The real Curve protocol is non-custodial and cannot move your funds without your signature. The risk comes from fake copies and from signing malicious approval requests.
How do I know a Curve site is fake?
Check the exact domain, look for bait words and look-alike letters, and never sign a request you don't understand. A security extension can flag clones automatically.
डिज़ाइन से ही निजता
Trust Line is a free browser extension that blocks fake versions of sites like this before they load and warns you about dangerous signatures on any site.
ब्राउज़र में जोड़ें — मुफ़्त