DeFi stablecoin depegs 70% after $80M exploit

TLDR

Resolv Labs USR stablecoin has suffered a severe depeg after an exploit allowed roughly $80 million of unbacked tokens to be minted.

1. An attacker used about $200,000 of USDC to mint around 80 million unbacked USR, driving the price down roughly 70 percent to about $0.27 and even lower in some pools.
2. Resolv now has roughly $95 million in assets versus $173 million in liabilities, leaving it only about 55 percent collateralized and forcing redemptions, pauses, and damage control across connected DeFi protocols.
3. The event reinforces that most hacked tokens do not recover, and highlights design and operational risks that DeFi stablecoin users should monitor closely going forward.

Deep Dive

1. How The Exploit Broke The Peg

Reports indicate an attacker exploited USRs minting system, using about $200,000 of USDC to mint 50 million and then 30 million USR with little or no backing, totalling roughly $80 million of uncollateralized supply. Multiple analyses describe this as a flaw or compromise in the issuance process, where a centralized signer or parameter validation failed, allowing the attacker to bypass normal collateral checks and mint at will.

Once the unbacked USR was minted, it was rapidly swapped into other stablecoins and Ether on DeFi pools, flooding liquidity and driving USR off its one dollar target. Coverage notes that USR traded as low as a few cents on some venues, while a recent market snapshot has it near $0.27, about 72 percent below the peg over the week, consistent with a roughly 70 percent depeg for headline purposes.

2. Collateral Gap, Redemptions, And Who Is Hit

Post exploit, Resolv is reported to hold about $95 million in assets against around $173 million in USR liabilities, putting the system near 55 percent collateralization and making it functionally insolvent under its original design. One detailed report notes that pre incident USR holders on an allowlist may recover about 93 cents per dollar if they redeem early, before shared collateral is drained.

Resolv has paused protocol contracts and warned users not to trade USR during recovery, as the circulating supply now mixes legitimate and illicitly minted tokens. DeFi lending and yield protocols that accepted USR or Resolv LP tokens as collateral, including some Morpho style vaults and leveraged loops, face write downs or bad debt while they isolate affected markets and unwind positions. At the same time, observers stress that USR is relatively small compared with system level stablecoins, so this is disruptive for niche users rather than a Terra size event.

3. Broader Stablecoin And DeFi Risk Signals

This exploit underscores that audits and prior growth cannot eliminate stablecoin risk if minting logic and operational security are flawed. Commentators note that Resolv had been audited and had grown to hundreds of millions in value locked, yet a compromised key or validation bug still proved fatal to the peg.

Broader research on hacks shows that damage tends to persist. One on chain security report finds hacked tokens suffer a median six month price drop of about 61 percent, and roughly 84 percent never regain their pre hack prices. In parallel, DeFi protocols have had to scramble to pause markets, isolate exposures, and reassure users, which is now a familiar pattern whenever collateral backed instruments fail.

Conclusion

The USR depeg shows how a single exploit in stablecoin issuance can turn a relatively healthy protocol into one that is undercollateralized and scrambling to ration recovery. Direct losses concentrate in USR holders and integrated DeFi vaults, but the bigger lesson is structural: design and operational controls around minting matter as much as collateral level for any stablecoin that aims to hold one dollar.