A routine security audit turned into a potential nightmare for Convex Finance as OpenZeppelin’s security team discovered a vulnerability during a security review of the Convex Finance protocol. The bug, if exploited, could have potentially put Convex’s locked value, $15 billion at the time, at risk, giving explorers direct control over it.