Curve cover,
coverage and gaps.

Unlike most listings, Curve has proven both sides in practice: a code-level exploit really happened (July 2023, via a Vyper compiler bug that drained the CRV/ETH and other pools), and Nexus opened a formal claims process for cover holders. That makes the covered peril concrete. Two caveats stand out. First, the 2023 losses were largely recovered by whitehats and reimbursed by the teams, so it never became a large clean payout test, and it ran under the older Protocol Cover wording v1.0, not today terms. Second, crvUSD, Curve own stablecoin, is excluded from this cover under clause 9.6 and sold separately as a depeg cover, and a depeg of the stablecoins sitting in Curve pools is excluded as a market movement, which is a real gap for a stableswap venue.