On March 22, 2025, Resolv Labs' USR stablecoin experienced a catastrophic depegging event after a hacker exploited a vulnerability in its minting contract. The attacker created 80 million unbacked tokens and drained $25 million in ETH, causing USR to plunge to $0.025 on Curve before recovering to around $0.85, still well below its $1 peg.
Attack Details: Abused Privileged Minting Role
The exploit targeted a minting role that lacked proper access controls, allowing the attacker to generate an unlimited number of tokens without collateral. After minting 80 million USR, the hacker swapped them for USDC and USDT on decentralized exchanges, then converted the proceeds into ETH and transferred them out. Resolv Labs immediately suspended protocol functions, reassuring that the core collateral pool remains intact, but the origin of the minted tokens and their conversion remains under investigation.
Market Impact: Market Cap Collapses by 75%
The depeg inflicted severe losses on USR holders. The token's price hit a low of $0.025, and its market capitalization dropped from $400 million to just $100 million — a 75% decline. The event also triggered liquidation risks in DeFi lending markets where USR was used as collateral. While ETH, USDC, and USDT remained relatively stable, USR itself lost over 3.6% of its value. The panic selling was exacerbated by a lack of liquidity on Curve, with many holders unable to exit at reasonable prices.
Security Lessons: Permission Control in DeFi
This incident is the latest in a series of DeFi exploits resulting from weak permission management. Security experts emphasize that privileged minting roles should always be protected by multi-signature schemes or timelocks. Resolv Labs is cooperating with security firms to investigate and may announce a compensation plan for affected users. However, the event has reignited debates about the sustainability of high-yield stablecoins, where aggressive yield generation often comes at the cost of safety. Regulators are likely to increase scrutiny on DeFi protocols that rely on centralized minting privileges.