Resolv Labs Hacked for $50M USR: Protocol Suspended After Exploit
Resolv Labs confirmed its protocol was exploited on Sunday, with an attacker minting 50 million unbacked USR stablecoin tokens by depositing just $100,000 in USDC. The team has suspended all protocol operations as the USR stablecoin lost its dollar peg, crashing to as low as 2.5 cents on Curve Finance.
$50 Million in USR Drained in Resolv Protocol Exploit
The attack began at approximately 2:38 AM UTC on March 22, 2026. An attacker exploited a vulnerability in the Resolv protocol’s minting mechanism, depositing $100,000 in USDC and receiving 50 million USR tokens in return.
The initial 50 million USR was only part of the damage. Security firm PeckShield identified an additional 30 million USR minted through the same exploit, bringing the total to approximately 80 million unbacked USR tokens.
USR is Resolv’s delta-neutral stablecoin, designed to maintain a $1 peg through ETH-backed collateral and hedging strategies. The exploit rendered the minting mechanism’s collateral checks ineffective, allowing the attacker to create tokens far exceeding the value deposited.
The attacker moved quickly to extract value, swapping USR for USDC and USDT before converting to ETH. D2 Finance, a DeFi analytics firm, estimated the attacker extracted roughly $25 million from the exploit.
“The attacker’s exit playbook is textbook DeFi hack cashout running at full speed.”
— D2 Finance (@D2_Finance)
The exact exploit mechanism has not been officially confirmed by Resolv Labs. D2 Finance outlined three possible vectors: oracle manipulation, a compromised off-chain signer, or missing amount validation between the mint request and completion stages.
Protocol Suspended: What USR Holders Need to Know Right Now
Resolv Labs paused all protocol functions immediately after detecting the exploit. Deposits, withdrawals, and minting are currently frozen.
The impact on USR’s peg was severe. The stablecoin crashed to $0.025 on Curve Finance, a 97.5% drop from its intended $1 value. At the time of reporting, USR had partially recovered but was still trading at approximately $0.87, a 13% deviation from peg.
The RESOLV governance token fell 10.11% in 24 hours, trading at $0.0544. The token is down 86.7% from its all-time high of $0.4085 reached in June 2025.
Protocol total value locked stood at $136.49 million before the suspension. That figure already reflected an 82% decline from Resolv’s peak TVL of $768 million, indicating significant capital outflows predating the exploit.
Resolv Labs has not yet issued a formal postmortem or confirmed whether user deposits beyond USR holdings are at risk. The protocol’s RLP insurance pool was designed to absorb losses in adverse scenarios, but its capacity to cover an exploit of this scale remains unclear. Holders should monitor the team’s official X account for updates on fund recovery and protocol restart timelines.
Resolv Hack Adds to a Costly Year for DeFi Security
The Resolv exploit joins a growing list of DeFi security failures in recent months. The attack highlights a recurring vulnerability pattern in stablecoin protocols: the gap between claimed collateral models and actual smart contract enforcement.
Resolv marketed USR as “fully backed by ETH with a delta-neutral design,” yet an attacker minted 80 million tokens with just $100,000 in collateral. The failure echoes previous stablecoin collapses where theoretical backing mechanisms broke down under adversarial conditions.
Resolv Labs counts Coinbase Ventures and Delphi Ventures among its backers. The scale of the exploit, with an estimated $25 million extracted, may draw additional scrutiny to the due diligence processes surrounding venture-backed DeFi protocols.
The broader crypto market reflects heightened anxiety. The Fear & Greed Index sits at 10, deep in “Extreme Fear” territory, compounding the negative sentiment around this incident.
Resolv Labs has not confirmed whether audits of the exploited contracts were completed prior to deployment, or whether the vulnerability existed in audited code. An official incident report is expected but has not yet been published.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
