DeFi stablecoin plunges 72% after $80M exploit

TLDR

Resolv Labs' USR stablecoin has depegged after an exploit that let an attacker mint around $80 million in unbacked tokens, causing a roughly 70 to 80 percent price collapse.

1. An attacker abused USR's minting process to create about 80 million unbacked tokens, cashing out roughly $23 to $25 million and driving USR as low as $0.14.
2. USR now has about $95 million in assets backing roughly $173 million in liabilities, leaving it only around 55 percent collateralized and functionally insolvent, with the protocol fully paused.
3. Impact appears concentrated in USR and related DeFi positions, but the incident highlights critical risks around permissioned minting and off chain infrastructure in decentralized stablecoins.

Deep Dive

1. How The Exploit Caused The Depeg

Multiple reports say an attacker exploited Resolv Labs' USR stablecoin by abusing its minting mechanics to create around 80 million unbacked USR against only about $100,000 to $200,000 of USDC deposited. Investigations point to a vulnerability in a two step request and complete minting flow, likely tied to a compromised signer or weak validation on a permissioned service role, rather than a pure on chain math bug. As the attacker dumped these tokens via DeFi pools and wrapped variants like wstUSR, USR lost its 1 dollar peg and traded as low as $0.14 before partially rebounding toward the $0.40 to $0.80 range in different markets.

2. Collateral, Insolvency, And Who Is Hit

Coverage from CoinDesk says Resolv holds about $95 million in backing assets against roughly $173 million of USR liabilities, implying only about 55 percent collateralization and leaving the system economically underwater, even if collateral was not directly stolen. Pre exploit USR holders who redeem early via an allowlisted process may recover something near 93 cents on the dollar, while later redeemers face larger haircuts as assets are exhausted. DeFi protocols that accepted USR or related Resolv positions as collateral, such as certain Morpho and yield vault integrations, are expected to realize pockets of bad debt, although multiple teams stress that exposure is limited and this is not a Terra Luna scale event.

3. Systemic Lessons And What To Watch

Resolv and security firms frame the root cause as an operational security failure around a permissioned minting path, showing how off chain keys and roles can compromise an otherwise audited protocol. Commentators are calling for real time monitoring of mint and burn flows, stricter access controls on stablecoin issuance, and designs that minimize trust in single signers or backend services. Key things to watch now are Resolv's final recovery and redemption plan, the size and distribution of bad debt across partner protocols, and whether regulators or major DeFi platforms tighten listing standards for algorithmic and crypto collateral backed stablecoins after this incident.

Conclusion

The USR exploit is a sharp reminder that DeFi stablecoins depend not only on collateral but also on issuance controls, and a failure there can erase the peg in hours. Losses appear concentrated in USR and connected strategies rather than the wider market, but it reinforces why users and protocols need to scrutinize minting architecture, collateral ratios, and operational security before treating any on chain dollar as interchangeable with cash.