Curve Finance awards dev $250k for finding reentrancy vulnerability