Odaily News: The Chief Information Security Officer of SlowMist, 23pds, tweeted that the recommended version in the official Vyper documentation is actually incorrect.

According to previous reports, Vyper, the programming language for Ethereum, announced that versions 0.2.15, 0.2.16, and 0.3.0 have a vulnerability in recursive locks that causes the functionality to fail. An investigation is currently underway, but any projects using these versions should immediately contact us.

In response, Curve officials stated that due to the vulnerability in Vyper 0.2.15, some stablecoin pools (alETH/msETH/pETH) have been attacked. We are assessing the situation and will provide updates to the community as the situation develops. Other pools are secure.