Resolv Labs Start Recovery After $25M USR Stablecoin Exploit

USR stablecoin depegs, Resolv Labs pauses operations and begins recovery for pre-exploit holders.

Warning sings marking a hacker on its land.
Created by Kornelija Poderskytė from Ciphera

Resolv Labs began recovery efforts on Monday following a major exploit of its USR stablecoin, which allowed an attacker to mint roughly 80 million unbacked tokens and extract up to $25 million in Ethereum

The breach caused USR’s price to fall from its $1 peg to as low as $0.025, a decline of nearly 97%, before partially recovering to $0.4–$0.8.

Source: TradingView

How the Exploit Unfolded

The attack occurred early March 22. A deposit of $200,000 in USDC was amplified through flaws in USR’s two-step minting functions by roughly 400 times, generating tens of millions of tokens without corresponding collateral.

The attacker sold the newly minted USR on decentralized exchanges, including Curve and Uniswap, flooding the market with unbacked supply. 

Resolv Labs confirmed that the breach was confined to USR issuance mechanics and that the core collateral pool remains fully intact. All protocol functions were paused immediately to prevent further exploitation.

By Monday, the protocol had begun allowing pre-exploit holders on the allowlist to redeem USR, starting March 23. Trading remains suspended for the wider market while the investigation continues.

Ripple Effects Across DeFi

The depeg affected interconnected DeFi protocols. Lending platforms such as Morpho and Fluid, which accepted USR or wrapped variants as collateral, experienced heavy outflows and near-total market depletion due to liquidations and arbitrage. Some protocols paused related markets to limit exposure.

On-chain tracking showed the attacker converted most USR to roughly 11,400 ETH, dispersed across multiple wallets. 

Resolv Labs continues to monitor the situation and has advised users to avoid trading USR or related assets until further notice.

Why It Matters

The USR incident highlights persistent risks in algorithmic and non-collateralized stablecoins. Even audited protocols remain exposed to flaws in minting and oracle mechanisms.

While large-scale DeFi hacks have become less frequent, isolated exploits continue to affect the sector. The USR event highlights challenges in stablecoin design and the importance of robust risk management.

Explore Ciphera’s hottest crypto scoops today:
Analyst Warns: Coinbase XRP Order Book Shows 9:1 Upside Skew
Stellar’s XLM Price Has a Habit: Sudden Re-Ratings, Then Long Drift

People Also Ask:

What caused the USR stablecoin exploit?

A flaw in the two-step minting functions allowed the attacker to generate 80 million unbacked USR tokens.

Which DeFi protocols were impacted?

Platforms like Morpho and Fluid, which accepted USR or wrapped variants as collateral, experienced outflows and paused markets.

What is Resolv Labs doing now?

Recovery for pre-exploit holders has begun, and trading remains suspended while the investigation continues.

Ciphera's Vibe Check: Which way are you leaning towards after reading this article?
Market Sentiment
100% Bullish

This article is for information purposes only and should not be considered trading or investment advice. Nothing herein shall be construed as financial, legal, or tax advice. Trading forex, cryptocurrencies, and CFDs pose a considerable risk of loss.

Subscribe here