It was unclear at press time how much had been drained from Curve as a result of the attack. BlockSec, a blockchain auditing firm, estimated the total losses above $42 million in a preliminary analysis posted to Twitter. Tarun Chitra, chief executive officer and founder of crypto risk modeling firm Gauntlet, estimated the exploiter made away with about $20 million of CRV and a version of ether.