Resolv USR Slides After $80M Exploit Floods Supply And Shakes DeFi Markets

TLDR

• Resolv said a compromised private key enabled about $80M in uncollateralized USR minting.
• USR fell to about $0.20 before recovering near $0.80, according to CoinGecko data.
• Chainalysis said the attacker converted USR to wstUSR and then swapped into other assets.
• Resolv paused protocol functions and said redemptions for pre-incident USR are being prepared.
• Resolv’s native RESOLV token dropped 6% to $0.054 after news of the exploit spread

Resolv’s USR stablecoin lost its dollar peg on Sunday after an exploit sharply increased its supply. The incident allowed an attacker to mint about 80 million uncollateralized USR and sell tokens across decentralized exchanges.

USR fell as low as $0.20 before recovering to around $0.80, according to CoinGecko. Resolv Labs, the core developer of the protocol, said it halted operations while it investigates the breach and works to contain the damage.

Exploit expanded supply and destabilized the peg

Resolv said the attack involved a compromised private key that gave a malicious actor unauthorized access to its infrastructure. The breach led to the minting of about $80 million in unbacked USR, which quickly entered the market.

Because USR is designed to hold a one-to-one value with the U.S. dollar, the sudden increase in supply hit confidence and liquidity. Onchain analysts Ai Yi and PeckShield flagged the event as USR lost its peg and faced rapid selling pressure.

USR is an on-chain stablecoin that relies on over-collateralized crypto assets rather than fiat reserves. The protocol uses assets such as ETH, staked Ethereum, and Bitcoin to support the token’s value.

That design became a focus after the exploit because the newly minted tokens were not backed by collateral. As those tokens moved into trading pools, the market price dropped sharply and then partially recovered.

Attacker moved funds through DeFi routes

Chainalysis said the attacker converted the newly minted USR into wstUSR before swapping it into other stablecoins and then Ethereum. The firm estimated that the attacker extracted about $25 million in value through the cash-out process.

D2 Finance described the movement as a “textbook DeFi hacking cash-out path,” with tokens sent in batches through multiple liquidity venues. That approach can reduce execution risk and also speed up exits during market stress.

RootData said the attack may have involved leaked off-chain signer keys, manipulated oracle inputs, or other minting weaknesses. Chainalysis added that mint approvals depended on an off-chain service using a privileged private key.

Its post-mortem also said the smart contract did not enforce a maximum cap on USR minting. That structure appears to have increased the damage once the signing system was compromised.

Resolv pauses protocol and plans next steps

Resolv said it burned about $9 million in USR to reduce the potential effect of the exploit. The team also said it is working with law enforcement and onchain analytics firms to trace the attacker and contain illicitly minted tokens.

In a public statement, the company said, “Earlier today, a malicious actor gained unauthorized access to Resolv infrastructure through compromised private key.” It added that all protocol functions were paused after the breach.

The firm said it is preparing to enable redemptions for “pre-incident USR,” starting with allowlisted users. That step is aimed at separating affected supply from tokens issued before the exploit.

The incident also hit the wider protocol ecosystem. RESOLV, the project’s native governance and value capture token, fell 6% to $0.054 after the attack became public.

The post Resolv USR Slides After $80M Exploit Floods Supply And Shakes DeFi Markets appeared first on CoinCentral.