Resupply: Hacker attack caused approximately 10 million USD in reUSD bad debts, stolen funds are still on the chain

ChainCatcher message, Resupply released a hacker attack analysis report, which pointed out that the attack on the crvUSD-wstUSR trading pair of Resupply resulted in approximately 10 million USD in reUSD bad debt, but the vulnerability only exists in specific token trading pairs, and other token trading pairs are unaffected. The Resupply market is operating as usual.

Currently, the debt limit for the affected token trading pairs has been set to 0, and withdrawals from the insurance pool have been suspended, requiring a formal governance vote to lift the suspension. Resupply noted that the problematic code segment has undergone multiple security audits, and independent researchers have been hired to review the codebase, but no reports of the issue were made. At this stage, the stolen funds remain on-chain, and they are monitoring the situation and will take necessary measures.