Understanding Kyber Network: a review
What Kyber's two reinventions and the 2023 KyberSwap exploit teach founders about surviving in DeFi.If you've ever bet a product on an architecture the market later abandoned and wondered how a team survives that twice, this article has the answer. You'll learn how Kyber's reserve model lost to Uniswap and forced two reinventions, what the November 2023 KyberSwap Elastic exploit cost the protocol, and why repaying every affected user is the reason Kyber still operates today.
This piece is a substantial revision of our July 2020 review of Kyber Network. The protocol we praised then no longer exists in that form: the reserve architecture, the original KNC token contract, and the early KyberDAO have all been replaced, and KyberSwap was exploited for roughly $48.9M in November 2023. Instead of erasing what we wrote, we quote the original below against what actually happened, because the six years in between hold more lessons than the review ever did.
What we saw in 2020
The original review opened with the pitch every liquidity protocol made that summer:
The Kyber Network is a decentralized liquidity protocol that works fully on-chain to enable “atom swaps” across several token protocols.
In mid-2020 that answered a real problem. On-chain liquidity was scarce, and Kyber solved it with reserves: market makers who committed liquidity to the protocol so any application could swap tokens without an order book. On top of the protocol sat KyberSwap, a retail app whose onboarding we admired:
Their Web app has a Fiat on-ramp integration with MoonPay and Wyre, so you can use credit cards, ApplePay, and wire transfers to buy $ETH .
Wyre itself shut down in 2023. A small detail, but a reminder that the stack we described assumed partners that no longer exist. The rest of the design was KNC, the utility token reserves paid fees in (with a portion burned), and the early KyberDAO at kyber.org, launched with the Katalyst upgrade, where holders staked KNC and voted on the fee and burn model.
Reinvented twice
The reserve model lost. Uniswap's automated market maker let anyone provide passive liquidity with no negotiation and no technical onboarding, and the professional-reserve approach could not compete on breadth. Kyber responded by rebuilding rather than defending: in 2021 KNC migrated to a new token contract, and KyberSwap pivoted from routing trades into Kyber's own reserves to operating as a DEX aggregator that sources prices across other exchanges. The review's closing judgment reads differently now:
The recent upgrade of the protocol and the creation of the KyberDAO offer a powerful model of governance for other projects with infrastructure quality.
The governance venue, the token contract, and the fee model that sentence referred to were all replaced within two years. What survived was the team's willingness to discard its own architecture, which mattered far more than the architecture itself.
The exploit that nearly ended it
On November 22, 2023, an attacker drained roughly $48.9M from KyberSwap Elastic, the protocol's concentrated-liquidity AMM, in what security researchers described as one of the most sophisticated precision attacks recorded. The attack targeted the exactness of Elastic's liquidity math itself, engineering swaps to land on tick boundaries where the protocol miscounted available liquidity. Kyber published a detailed post-mortem, CoinDesk covered the negotiations the attacker teased, and Halborn's analysis walks through the mechanics. A month later, in December 2023, Kyber laid off around half of its team.
Against that, the sign-off of our 2020 review:
I wish nothing but the best for the Kyber Network and hope for great things to continue to be brought to Crypto by the success of this protocol.
Making users whole
What happened next is why we rewrote this piece instead of leaving it archived. Kyber committed its own treasury to a Treasury Grant Program that covered 100% of affected users who applied. In an industry where exploited protocols routinely socialize losses or disappear, Kyber chose the expensive option. Today it operates as a DEX aggregator and earn platform ( KyberSwap).
What we take from it
Kyber was an important liquidity layer before Uniswap's dominance, and its story since is the redemptive arc DeFi rarely produces. Three lessons stand out for founders.
Architecture is not identity. Kyber outlived its reserve model and its own token contract because the team treated both as replaceable. If your product's core mechanism stops winning, the mechanism goes, not the company.
Sophistication cuts both ways. Elastic was mathematically advanced, and the attack that emptied it was advanced in exact proportion. Every layer of cleverness you ship in financial code is a layer someone else can study longer than you did. Budget your audits to your complexity, not to your timeline.
Trust is the recoverable asset. The exploit took the money and half the team, but committing the treasury to make eligible, verified claimants whole is the reason there was still a protocol left to run a roadmap. Choosing to cover the affected users who came forward, rather than socialize the loss, is what let the community forgive the failure. That is the part of the 2020 review's optimism that turned out to be justified, just not for any of the reasons we gave.