Resolv Labs said an attacker exploited the minting mechanics of its USR stablecoin, creating roughly 80 million unbacked tokens and selling them through DeFi pools. USR plunged to $0.14, or 86% below its intended $1 peg, before recovering to $0.42. The team said the issue was limited to USR issuance and that the collateral pool “remains fully intact.” The protocol has been paused while the incident is reviewed and containment work continues.
Unbacked minting triggered a sharp depeg
The exploit hit the stablecoin at its core. Once tens of millions of unsupported USR entered circulation and were dumped into DeFi liquidity venues, the peg broke quickly. The partial rebound eased some of the immediate price shock, but the event still left holders and integrated protocols dealing with the fallout. In stablecoin systems, stress at the issuance layer can move fast, and this case showed that clearly.
DeFi platforms moved to limit exposure
Protocols with links to USR reacted within hours. Lido, Morpho, and Aave said their systems were unaffected, though some vaults had exposure to the incident. Michael Pearl of Cyvers said the main risk appeared to sit in lending and leverage markets, especially where USR or RLP had been used as collateral.
Platforms including Euler, Venus, and Fluid paused markets or isolated vaults in an effort to prevent additional damage. Pearl said the impact looked localized rather than system-wide, with no sign at that stage of contagion spreading across the broader DeFi sector. That distinction matters. It suggests the event was serious, but still contained to the protocols and positions most directly tied to the token.
Audit coverage did not prevent an operational failure
The incident also renewed scrutiny on what audits can and cannot catch. Resolv Labs’ smart contracts had gone through multiple audits, yet the exploit still happened. Security firm Pashov, which audited Resolv’s staking module in July 2025, said the attack likely came from an operational security weakness rather than a flaw in protocol design. The firm pointed to a possible private key compromise as the root cause.
Pearl said real-time monitoring would help spot this kind of anomaly earlier, especially by tracking mint and burn flows and checking circulating supply against reserves. Resolv Labs said it is still investigating and working on recovery. The key claim from the team remains unchanged: assets in the collateral pool were not lost, even as the market continues to assess the damage from the USR depeg.