Verdict Convex is a layer on Curve, and this cover protects the layer, not what is underneath. The listing spells that out itself: its metadata excludes losses that occur outside the designated protocol, such as a separate protocol used in an underlying yield aggregation strategy. Since Convex positions ultimately sit in Curve pools, a Curve exploit (as in July 2023) points a Convex holder to Curve cover, not this one. What remains genuinely covered is a bug in Convex own contracts, on a target with no core fund loss to date but a complex admin surface and a June 2022 frontend hijack. The three explicit exclusions make the boundary honest and clear; they also make the covered surface thin.
Confidence: medium 6 red flags As of 2026-07-14