DeFi stablecoin plummets 72% after $80M exploit

TLDR

Resolv Labs USR stablecoin (USR) suffered an exploit that let an attacker mint about $80 million in unbacked tokens, causing a roughly 70 percent depeg and leaving the protocol undercollateralized.

1. An attacker abused USRs minting infrastructure to create around 80 million illegitimate tokens, dumping them and driving USR as low as $0.14, about 72 percent below peg.
2. Resolv reports about $95 million in assets against $173 million in liabilities, roughly 55 percent collateralization, meaning many USR claims now face haircuts despite the collateral pool itself remaining intact.
3. DeFi lending markets and yield platforms using USR or related assets as collateral are managing bad debt, while Resolv tries recovery, so users should watch redemptions, protocol responses, and future opsec changes.

Deep Dive

1. How The Exploit Broke USR

Resolv Labs confirmed that an attacker was able to mint roughly 80 million unbacked USR by compromising infrastructure involved in the stablecoins issuance logic, not by draining collateral directly. Reporting shows USR briefly traded as low as $0.14 before stabilizing around $0.27, a drawdown of roughly 70 to 86 percent from its $1 target according to several accounts of the USR stablecoin exploit.

Onchain analysis cited in coverage indicates the attacker converted most of the freshly minted USR into Ether, reportedly ending up with about 11,400 ETH while continuing to dump remaining tokens. Resolv paused protocol contracts and burned some of the illicit supply, but the oversized, unbacked issuance had already shattered market confidence.

2. Collateral, Haircuts, And DeFi Contagion

Post-attack, Resolv reportedly holds about $95 million in assets versus roughly $173 million in outstanding USR liabilities, a collateralization ratio near 55 percent, which makes the system economically insolvent even if collateral wallets are safe. One analysis suggested allowlisted pre-exploit USR holders might recover about 93 cents on the dollar if they redeem quickly, implying that late movers could fare worse as assets are consumed by redemptions.

DeFi protocols that used USR or Resolvs LP tokens as collateral have started isolating or pausing affected markets. Lending platforms such as Morpho and others have acknowledged concentrated exposure, while several large money markets stated they had little or no direct USR risk, and one hardware wallet executive stressed this is not a Terra-scale event in terms of systemic size, as noted in a detailed incident recap.

3. Recovery Steps And Lessons To Watch

Resolv says the collateral pool remains fully intact and attributes the incident to unauthorized third-party access, likely a private key or infrastructure compromise rather than a core smart contract bug. The team has paused the protocol, is burning illicit tokens where possible, working with onchain analysts and law enforcement, and coordinating redemptions for pre-exploit users.

For DeFi users, the bigger lesson is that even audited protocols can fail if operational security around privileged keys is weak. Critical questions include who can mint or pause, how those keys are secured, and how quickly a protocol can freeze abnormal behavior. Watching how Resolv changes its governance, key management, and monitoring will be a useful gauge of how seriously the industry internalizes this incident.

Conclusion

The USR exploit shows how a single failure in issuance controls can turn a seemingly well-collateralized stablecoin into a partially backed, distressed asset in hours. Direct losses concentrate in USR holders and strategies that looped it as collateral, while the broader DeFi system is absorbing the shock by isolating exposure. The key forward-looking signal is whether stablecoin issuers harden mint controls and real-time monitoring so that future anomalies are detected and contained before they become 70 percent depegs.