Curve Review
Four named auditors, but the code grants no rights
of 10
Curve is deployed across 24 chains and names four auditing firms, but its repositories carry a licence stating that no right of reproduction or distribution is granted, and its fee pages could not be reached.
No money changes hands. This is a non-commercial project: no advertising, no sponsored placements, and no affiliate or referral links. Links to the services below earn us nothing. Every overall score is the plain average of the criteria shown on the page, so you can check the arithmetic yourself — see our rating methodology and how the site is funded.
Licence
No rights granted; published for informational purposes only
Admin fee
50% of the trade fee
Swap fee tiers
Could not be verified — pages returned 403 or empty
Chains
24 named
Auditors
ChainSecurity, MixBytes, Quantstamp, StateMind
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (3.0 + 1.0 + 4.0 + 10.0 + 9.0) ÷ 5 = 5.4.
Pros
- Deployed across 24 named chains, joint widest coverage here
- Four auditing firms named: ChainSecurity, MixBytes, Quantstamp and StateMind
- Admin fee documented as a constant 50% of the trade fee
Cons
- The LICENSE file states code is published for informational purposes only, with no licence or right of reproduction or distribution granted or implied
- GitHub classifies the repositories as NOASSERTION rather than any recognised licence
- The fee pages returned 403 or rendered empty, so swap fee tiers could not be verified
- Contract upgradeability is not stated
The starkest licence finding in this comparison
Curve's LICENSE file states that the code has been published for informational purposes only and that no licence, right of reproduction or distribution or other right with respect to it is granted or implied. GitHub's classifier returns NOASSERTION across the stableswap-ng, curve-contract and twocrypto-ng repositories.
This is the clearest illustration of a principle this whole rubric rests on: readable code is not open-source code. Anyone may inspect Curve's contracts; nobody is granted the right to reuse them.
Fees we could not confirm
The liquidity provider fee page returned 403 and the fee architecture page rendered as an empty shell. We can report only the admin fee, documented as a constant 50% of the trade fee. Rather than fill the gap from memory, we have scored the criterion on what could actually be read.
Where it is strong
Twenty-four named chains and four named auditors are both at the top of this category.
How it compares
Jupiter
Zero protocol fees, unpublished core code
1inch
MIT-licensed aggregator with unpublished fees
Orca
Detailed fee tiers under a revocable licence
Aerodrome
Honest about which parts stay upgradeable
Raydium
Exact fee tiers under a clean Apache licence
SushiSwap
Widest chain deployment, thinnest current disclosure
PancakeSwap
Ten named auditors and a GPL licence
Balancer
GPL-3.0 licensed and immutable by design
Uniswap
Published tiers and genuinely immutable core
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.Curve stableswap-ng — LICENSE — checked
- 2.Curve — audits — checked
- 3.Curve — deployments — checked
Frequently asked questions
Is Curve open source?
No. The LICENSE file states the code is published for informational purposes only, with no licence or right of reproduction or distribution granted or implied.
What are Curve's swap fees?
We could not verify them. The official fee pages returned 403 or rendered empty when checked on 24 July 2026; only the admin fee, a constant 50% of the trade fee, is documented on a reachable page.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.