- An attacker minted 80 million unbacked USR tokens, extracting around $25 million.
- The stablecoin briefly collapsed to $0.025 before partially recovering.
- The exploit was caused by weak access controls and missing safeguards.
- The incident highlights ongoing risks in DeFi stablecoin designs.
Exploit Leads to Massive Token Inflation
A vulnerability in Resolv’s stablecoin system allowed an attacker to mint around 80 million unbacked tokens.
The exploit began with a relatively small deposit but resulted in a massive increase in supply, enabling the attacker to extract significant value.
Stablecoin Loses Its Peg
Following the attack, the USR stablecoin rapidly lost its dollar peg, dropping as low as $0.025.
Although the price later recovered partially, it remained below its intended value, reflecting a loss of confidence in the system.
Weak Security Controls Identified
Analysts traced the issue to insufficient safeguards in the minting process.
The protocol relied on a single privileged account without proper limits, oracle checks, or validation mechanisms.
This allowed the attacker to bypass expected constraints and generate excess tokens.
Broader Impact on DeFi Ecosystem
The exploit affected not only the stablecoin itself but also related DeFi platforms that accepted it as collateral.
Users holding the token faced immediate losses due to dilution and liquidity collapse.
The incident adds to a growing list of DeFi exploits, highlighting the need for stronger security practices and real-time monitoring in decentralized systems.
