Resolv Labs $80M USR Exploit Forces Protocol Pause

Resolv Labs $80M USR Exploit pauses protocol

Resolv Labs $80M USR Exploit unfolded after attackers minted roughly 50 million unbacked USR tokens. The team confirmed the incident through its official X account and paused all protocol functions to contain the situation. (Source: Resolv Labs X Announcement)

On-chain analysis revealed the full scale. Attackers generated close to $80 million in USR using only around $200,000 in USDC. The sudden supply shock pushed USR as low as $0.257 before partial recovery. (Source: Exploit Tracker)

Background on Resolv Labs and USR

Resolv Labs built its protocol around a delta-neutral stablecoin design. USR aims to maintain a dollar peg using ETH collateral hedged with perpetual futures. This allows the system to generate yield while reducing exposure to market volatility.

A secondary token, RLP, acts as the risk layer and absorbs losses when the system comes under stress. The protocol launched in late 2024 and scaled quickly. It reached over $600 million in total value locked before declining to around $136 million by March 2026. (Source: DefiLlama)

Resolv positioned USR as a transparent and overcollateralized option for users seeking crypto-native yield.

Why this matters

Resolv Labs $80M USR Exploit exposes a critical flaw in minting controls. The attacker created a massive supply of tokens with minimal collateral, breaking the system’s core assumptions.

The financial impact extends beyond the depeg. The attacker has already converted a large portion of funds into ETH and other assets, securing roughly $60 million in current holdings. (Source: Exploit Tracker)

For users, this raises immediate concerns around redemptions and recovery. For the broader market, it adds pressure on yield-bearing stablecoins, which already face skepticism due to complexity and risk exposure.

How the exploit worked

The vulnerability originated in a contract with privileged access controls. A SERVICE_ROLE wallet retained unrestricted authority to execute key functions. The attacker exploited this by calling completeSwap with inflated parameters.

They deposited small amounts of USDC, then triggered swaps that minted tens of millions in USR without proper backing. The process repeated multiple times, rapidly expanding supply.

The attacker then converted the minted USR into wstUSR and sold it across liquidity venues including Paraswap, KyberSwap, and Uniswap. This selling pressure caused the sharp depeg.

Although the team queued a pause through its multisig, the attacker continued draining liquidity until the contracts stopped responding.

What happens next

Resolv Labs has paused all protocol functions while evaluating recovery options. Possible next steps include using the RLP insurance layer or introducing a compensation plan for affected users.

On-chain analysts continue tracking attacker wallets, which still hold significant ETH and wstUSR positions. The team is expected to release a detailed post-mortem explaining the exploit and outlining recovery measures.

March 23, 2026 Update: Private-Key Compromise Confirmed

Resolv Labs has confirmed that the exploit was caused by a compromised private key, not a flaw in the smart contracts. This access allowed the attacker to mint unbacked USR tokens directly. The team has already burned around 9 million USR still under attacker control and stated that the core collateral pool remains intact at roughly $141 million, with minimal realized losses so far.

Redemptions are now live for pre-incident USR holders, marking the first step toward recovery. However, the protocol remains paused while investigations continue and funds are tracked.

USR is still trading well below peg at around $0.26–$0.27, and the team continues to advise users not to interact with the protocol until further updates.

Updated Key Figures:

• Legitimate USR supply (pre-exploit): ~102 million
• Illicit USR minted: ~71 million still in circulation
• Attacker extracted value: ~$23–25 million
  • Primarily ~11,400 ETH plus smaller wrapped asset positions