Curve V2 pools vulnerable to re-entrancy attack due to incorrect assumption in Meta Registry, fix underway