-
Attackers exploited minting logic to create 50M unbacked USR, amplifying 100K USDC into massive token output.
-
Rapid swaps into USDC, USDT, and ETH triggered sell-off, crashing USR to $0.257 and briefly as low as $0.025.
-
Resolv paused protocol, confirmed collateral safe, while losses near $25M and recovery efforts remain ongoing.
Resolv Labs confirmed a security incident on Sunday after attackers minted 50 million unbacked USR tokens through a contract exploit. The issue affected the token’s issuance system, not its collateral pool. According to the team, protocol functions were paused immediately while investigations and recovery efforts began to contain the breach.
Exploit Targets Minting Mechanism
The attack centered on USR’s minting logic, allowing abnormal token creation. Onchain investigator Ai9684xtpa reported that 100,000 USDC generated 50 million USR. This represents a 500 times amplification in minting output.
Additionally, security firm PeckShield stated that attackers minted another 30 million USR. However, Resolv Labs noted that underlying collateral remained intact. The team emphasized that no assets in the backing pool were lost during the incident.
Meanwhile, D2 Finance suggested multiple possible causes. These include oracle manipulation, compromised offchain signing, or missing validation checks.
Rapid Sell-Off Drives Depeg
Following the exploit, attackers quickly moved funds across protocols. According to D2 Finance, they swapped USR into USDC and USDT before converting assets into Ether. This sequence accelerated selling pressure across liquidity pools.
Consequently, USR lost its dollar peg within minutes. The token dropped to $0.257, marking a 74.2% decline. In some pools, prices fell as low as 2.5 cents due to slippage and liquidity strain.
Notably, USR reached this low point just 17 minutes after the initial minting event. The Curve Finance pool, its most active market, recorded intense trading activity during this period.
Recovery Efforts And Market Impact
Resolv Labs stated that containment and impact assessment remain top priorities. The team also aims to protect legitimate users while reviewing system vulnerabilities. Protocol operations remain paused as investigations continue.
Meanwhile, USR has partially recovered in price. It recently traded near $0.86, still below its intended $1 peg. D2 Finance estimated that attackers extracted approximately $25 million during the incident.The event follows a decline in crypto exploits earlier in February. However, this incident shows continued risks tied to smart contract vulnerabilities.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Gate Daily Report (April 27): Comments related to the Trump shooting incident boost the TRUMP coin; the U.S. Department of the Treasury will include Venmo in debt-inquiry donation payments
Bitcoin (BTC) sees a sharp short-term surge and rebound, temporarily trading at around $78,900 as of April 27. Trump’s provocative remarks about the shooting incident boosted the prices of meme coins such as TRUMP, MAGA, and DJT, because a carefully crafted narrative has once again come back into view. The U.S. Treasury has moved Venmo into the debt donation payment channel, after the previously strategic Bitcoin reserve bill stalled.
MarketWhisper13h ago
Justin Sun Skips Trump Memecoin Event Amid Legal Dispute with World Liberty
Gate News message, April 26 — Justin Sun, one of the largest investors in the TRUMP token, notably did not attend a memecoin-themed event hosted by US President Donald Trump at Mar-a-Lago in Florida this year, marking a significant shift from his prominent appearance at a similar event last year.
T
GateNews19h ago
Aave, Kelp, LayerZero Propose Releasing $71M in Frozen ETH to Support rsETH Recovery
Gate News message, April 26 — A coalition of major DeFi protocols led by Aave Labs, joined by Kelp DAO, LayerZero, EtherFi, and Compound, filed a Constitutional AIP on Saturday morning asking the Arbitrum DAO to release approximately $71 million in frozen ETH to support DeFi United, a cross-protocol
GateNews04-26 14:33
Litecoin Undergoes Deep Chain Reorganization After MWEB Privacy Layer Zero-Day Exploit
Gate News message, April 26 — Litecoin experienced a deep chain reorganization on Saturday (April 26) after attackers exploited a zero-day vulnerability in its MimbleWimble Extension Block (MWEB) privacy layer, according to the Litecoin Foundation. The reorg spanned blocks 3,095,930 to 3,095,943 and
GateNews04-26 12:11
Aave, Kelp, LayerZero seek Arbitrum release of $71M frozen ETH
Aave Labs, Kelp DAO, LayerZero, EtherFi, and Compound filed a Constitutional AIP on the Arbitrum forum Saturday morning requesting the network's DAO release approximately $71 million in frozen ETH to support rsETH recovery efforts, according to The Block. The proposal seeks release of 30,765.67 ETH
CryptoFrontier04-25 07:07
Gate Daily Report (April 24): US Treasury sanctions Cambodian crypto “pig butchering” scams; Tether mints an additional 1 billion USDT
Bitcoin (BTC) rebound momentum is weakening, with a temporary quote around $78,030 as of April 24. The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned a Cambodian politician linked to a crypto “pig butchering” scam center. Tether issued another 1 billion USDT on the Ethereum network; over the past 5 days, it has issued a total of 3 billion USDT on the Ethereum network.
MarketWhisper04-24 01:55
