Resolv stablecoin drops 70% after $80 million exploit after attacker mints USR

Resolv Labs has confirmed a significant security breach resulting in the minting of approximately $80 million in uncollateralized USR stablecoins due to a compromised private key. This incident has left the protocol functionally insolvent, with current assets of roughly $95 million against liabilities of approximately $173 million in outstanding USR. The USR token is now trading at a drastically devalued price of $0.27, marking a 72% drop in the past week.

Exploit Details and Impact

The attack involved a malicious actor gaining unauthorized access to Resolv's infrastructure via a compromised private key, leading to the minting of illicit USR tokens. While the team managed to pause smart contracts and burn about 9 million of the newly minted tokens, the damage to the protocol's stability and market confidence was substantial. Unlike software bugs, key compromises represent infrastructure failures that are difficult to prevent through code audits alone.

The total USR supply now consists of 102 million pre-incident tokens and approximately 71 million illicitly minted tokens still in circulation. As redemptions drain remaining assets, the protocol's holdings have fallen to $95 million from an initial $141 million. This leaves the protocol with a collateralization ratio of about 55%.

Resolv is facilitating redemptions for pre-incident USR holders through an allowlist process, aiming to distribute the remaining $95 million in assets. This process, if prioritizing legitimate holders, would provide them with approximately $0.93 on the dollar.

Market Reaction and Broader Implications

The market has reacted sharply to the exploit, with USR trading at $0.27 on CoinGecko, down 72% over the week and 61% in the last 24 hours. Trading volumes surged to $8.4 million in a single day, indicating significant market volatility and attempts to price in the exploit's severity. The protocol's Total Value Locked (TVL) has plummeted from a February 2025 peak of nearly $684 million to around $95 million pre-exploit.

Charles Guillemet, CTO of Ledger, noted that the exploit could create bad debt on lending markets, particularly flagging Morpho pools that used USR as collateral, some of which have already seen users exit positions.

Resolv Labs' Response and Warnings

Resolv Labs stated that the underlying collateral was not directly compromised, attributing the attack to unauthorized third-party actions including infrastructure compromise and cyberattacks. The team is collaborating with law enforcement and onchain analytics firms to recover assets. They strongly advise against trading USR or related Resolv tokens during the recovery phase, warning that user actions could impact the asset recovery process and potential claims.