DeFi stablecoin crashes 72% after exploit

TLDR

Resolv Labs USR stablecoin has violently depegged after an exploit, trading around 70 percent below its 1 dollar target and leaving the protocol effectively insolvent.

1. Resolv USR was hit by a private key exploit that let an attacker mint about 80 million unbacked tokens and dump them for roughly 25 million dollars in crypto.
2. The protocol now holds about 95 million dollars in assets against 173 million dollars in liabilities, roughly 55 percent collateralization, so many USR holders face partial recovery at best.
3. The incident underscores a key DeFi risk: centralized off-chain control over minting, and users should treat single-key stablecoin designs as structurally fragile.

Deep Dive

1. What Happened To This Stablecoin

Resolv Labs USR stablecoin relied on an off-chain approval service using a privileged private key to authorize new mints. That key was compromised, allowing an attacker to mint around 80 million uncollateralized USR tokens.

According to multiple reports, the attacker converted those unbacked tokens into other assets (via wstUSR and swaps), extracting roughly 24 to 25 million dollars in ETH and stablecoins before liquidity dried up. USR then depegged sharply, dropping over 70 percent to trade near 0.27 dollars in recent quotes, down about 72 percent in a week.

Resolv paused protocol functions and burned about 9 million of the illicit tokens, but the extra supply and loss of confidence have kept USR far from its 1 dollar peg.

2. Insolvency And User Impact

After the exploit, the protocol is reported to hold about 95 million dollars in assets against 173 million dollars in USR liabilities, implying roughly 55 percent collateralization and leaving it functionally insolvent.

Resolv has said it will prioritize pre-incident USR holders via an allowlist, and some analyses estimate early redeemers might receive around 0.93 dollars per dollar of USR if they exit before assets are depleted. Anyone buying USR after the depeg is likely behind that queue and may recover much less or nothing.

There is also knock-on risk to lending protocols that accepted USR as collateral, where underwater positions can create bad debt if USR does not meaningfully re-peg.

3. Design Flaws And Lessons For DeFi

This was not a classic smart contract bug but a governance and infrastructure failure. Minting relied on a single off-chain key with no strict on-chain mint limits or collateral checks.

That design created a single point of failure where one compromised key effectively controlled the entire token supply. Security experts are highlighting this as a textbook example of why stablecoins need robust on-chain constraints and multi-sig or distributed control over issuance.

For users assessing DeFi stablecoins, critical questions include: who controls minting, are there on-chain caps and collateralization checks, and how transparent is the backing and redemption process.

Conclusion

A single compromised mint key turned USR from a dollar-pegged asset into an undercollateralized, crisis-stage token, with the protocol now scrambling to manage redemptions and bad debt. The bigger takeaway for crypto users is that stablecoin safety hinges less on branding and more on verifiable on-chain controls, distribution of power over minting, and clear recovery playbooks when something breaks.