{"id":7723,"date":"2026-03-23T09:37:37","date_gmt":"2026-03-23T09:37:37","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=7723"},"modified":"2026-03-23T09:37:37","modified_gmt":"2026-03-23T09:37:37","slug":"usr-stablecoin-crashes-after-exploit-as-millions-in-unbacked-tokens-flood-market","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=7723","title":{"rendered":"USR Stablecoin Crashes After Exploit as Millions in Unbacked Tokens Flood Market"},"content":{"rendered":"

<\/p>\n

\n
\n
\n
    \n
  • An attacker exploited Resolv Labs\u2019 USR minting system to create 80 million unbacked tokens in two transactions, using roughly US$200,000 in initial capital.<\/span><\/li>\n
  • The exploit crashed USR from its US$1 peg to as low as US$0.025 on Curve Finance, with the attacker extracting approximately US$24 million in ETH before protocol functions were paused.<\/span><\/li>\n
  • Security firms disagree on the root cause, and some identified three possible vectors, including a gamed oracle or missing validation checks.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n

    An attacker minted 80 million unbacked USR stablecoins within 17 minutes early Sunday, exploiting a flaw in Resolv Labs\u2019 issuance system and pushing the token as low as US$0.025 (AU$0.035) on Curve.<\/p>\n

    The exploit allowed roughly US$200,000 (AU$286K) in USDC to generate more than 500 times the expected value. Two mint transactions were executed at 2:21 AM UTC and shortly after, before the activity was detected at 2:38 AM UTC.<\/p>\n

    Resolv Labs said it paused all protocol functions and is working on recovery. The team stated that collateral backing the system remains intact and that the issue was limited to minting mechanics, a claim questioned by security researchers.<\/p>\n

    \n
    \n
    \n

    We are currently investigating a security incident involving unauthorized minting of USR.<\/p>\n

    At this stage:<\/p>\n

    The collateral pool remains fully intact. No underlying assets have been lost.<\/p>\n

    The issue appears isolated to USR issuance mechanics.<\/p>\n

    Our immediate priority is to:<\/p>\n

    1)\u2026<\/p>\n

    \u2014 Resolv Labs (@ResolvLabs) March 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

    Read more: Bitcoin Hash Rate Drops as Energy Shock Triggers Miner Pressure<\/strong><\/p>\n

    Root Cause Disputed<\/h2>\n

    The attacker converted the minted USR into an estimated 9,100 to 11,409 ETH and retains about US$1.1 million (AU$1.56 million) in wrapped USR. Around 36.74 million USR continues to be sold across decentralised exchanges.<\/p>\n

    Security analysis points to failures in access control and validation. Pashov Security attributed the incident to a private key compromise tied to a privileged \u201cservice role\u201d that was controlled by a single externally owned address rather than a multisignature wallet.\u00a0<\/p>\n

    Other analysts identified missing oracle verification and the absence of mint limits as contributing factors. Additional scenarios include manipulation of price feeds or gaps between swap request and completion checks.<\/p>\n

    The rapid increase in supply overwhelmed market demand and broke the token\u2019s dollar peg. Losses were concentrated among users who acquired USR near US$1 (AU$1.42) before the collapse.<\/p>\n

    DeFi protocols Scramble<\/h2>\n

    Multiple DeFi protocols moved to contain exposure. Euler paused USR-related strategies, Venus halted trading, Lista suspended markets, and Fluid isolated affected vaults. Morpho reported no direct vulnerability but confirmed liquidations in vaults holding USR. Even Ledger\u2019s CTO had a few words about the exploit, calling it bad debt.<\/p>\n

    \n
    \n
    \n

    Resolv Labs was exploited. $50M worth of USR was minted without collateral.
    It lost its peg and is now trading around ~$0.5, with lows below $0.2.
    This will create bad debt on some lending markets, particularly in specific pools.
    Some Morpho pools using USR as collateral have\u2026 https:\/\/t.co\/uo69WEd9IE<\/p>\n

    \u2014 Charles Guillemet (@P3b7_) March 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n

    USR\u2019s \u2018total value locked\u2019 had already fallen from about US$400 million (AU$568 million) in early February to roughly US$100 million (AU$142 million) before the incident. The RESOLV governance token declined 6% to US$0.054 (AU$0.077).<\/p>\n

    The value extracted in the exploit exceeds the US$26.5 million (AU$37.6 million) in total DeFi losses recorded across February 2026.<\/p>\n

    Related: Ancient Bitcoin Whales Move Millions as Middle East Tensions Shake Markets<\/strong><\/p>\n<\/p><\/div>\n