A governance attack launched against a dead Curve clone called Swerve Finance is still ongoing and the culprit may have been doxed.