Resolv Labs moved to reassure users after an exploit struck the issuance mechanics of its USR stablecoin, knocking the token well below its intended one-dollar peg and prompting several decentralized finance protocols to act quickly to limit exposure. The attacker created tens of millions of unbacked tokens and sold them through DeFi liquidity pools, breaking the peg and forcing Resolv to pause protocol functions while it assessed the damage. The team stated in a post on X that the collateral pool remains fully intact and that the problem appears isolated to USR’s issuance mechanics.
USR fell as low as $0.14, representing an 86 percent drop from its target price, before rebounding to $0.42 at the time of reporting, according to data from CoinGecko. Onchain data from Arkham, corroborated by Web3 security firm Cyvers, showed the attacker converted much of the minted USR into Ether, selling a portion for approximately 11,400 ETH, worth around $24 million. Independent analysts noted that a remaining 36.74 million USR was still being continuously sold into the market.
Michael Pearl, vice president of GTM and strategy at Cyvers, told Cointelegraph that because the token supply had expanded faster than the market could absorb, the value of the remaining tokens was significantly impaired. He assessed the risk as concentrated in lending markets and leverage loops rather than spread across the broader ecosystem. Protocols that had integrated USR, wstUSR, or RLP into lending, leverage, or yield strategies carried the primary exposure.
Several DeFi protocols with ties to Resolv moved to clarify their positions. Liquid staking provider Lido confirmed that Lido Earn user funds were safe, while Morpho cofounder Merlin Egalite stated that the lending protocol’s own contracts were unaffected and that only certain vaults had any exposure. Aave founder Stani Kulechov said the platform had no direct USR exposure and that Resolv was repaying its outstanding debt to the protocol.
The X account “yieldsandmore” flagged potential losses in Resolv’s junior RLP tranche, pointing to possible knock-on effects for yield platforms such as Stream and yoUSD that used RLP as collateral. Pearl noted that protocols including Euler, Venus, Lista, and Fluid had taken precautionary steps such as pausing markets or isolating vaults, while others declared no exposure at all. He described the situation as concentrated with localized spillover rather than widespread contagion.
Ledger chief technical officer Charles Guillemet weighed in on X, stating that given the relatively small size of USR, the incident did not resemble a Terra Luna-type event. Security firm Pashov, which audited Resolv’s staking module in July 2025, told Cointelegraph that Resolv’s design was sound and that the root cause was more likely a private key compromise, pointing to an operational security flaw rather than a fundamental design failure. Pashov said understanding how that compromise occurred remained a priority.
Pearl argued that while smart contract audits are necessary, they are inherently static and limited in scope, and that real-time, artificial intelligence-powered monitoring is needed to detect anomalies as they arise. For stablecoin systems in particular, he said this means continuously tracking mint and burn flows, validating supply against reserves, and monitoring oracle inputs and liquidity conditions. Resolv’s contracts have undergone multiple audits since 2024, and Cointelegraph reached out to Resolv Labs for comment but had not received a response by the time of publication.
Originally reported by CoinTelegraph.
