usr

According to official news, the Resolv Foundation has released a complete recovery framework following the protocol security incident. Previously, on March 22, 2026, the protocol was attacked due to a security vulnerability, resulting in the illegal minting of USR tokens entering the market. The protocol subsequently suspended operations and entered recovery mode. Resolv stated that USR was designed as a "premium layer" stable asset backed by collateral, while RLP served as an "insurance layer" to absorb losses. According to the recovery plan, USR/wstUSR held before the attack will be exchanged for USDC at a 1:1 ratio, while USR purchased after the attack will be processed at a 1:0.5 USDC ratio; RLP holders will recover approximately 60%+, with part of the compensation distributed in the form of RESOLV tokens. The official compensation application window is open for three months.At the same time, Resolv announced the launch of a new business line called "Vault Street," managed by the Resolv Foundation, focusing on the distribution and structured yield products of tokenized real-world assets (RWA). The first product, primeUSD, has entered the private testing phase, open to professional institutional investors, allowing users to participate in leveraged U.S. Treasury yield strategies through stablecoins. Resolv stated that this product combines structured financing experience from traditional finance with on-chain DeFi infrastructure, aiming to build an institutional-level RWA yield distribution platform. In addition, the functionality of the RESOLV token remains unchanged, with staking and unstaking functions restored, and reward distribution resumed on May 26. Resolv emphasized that it will continue to promote the expansion of Vault Street products, upgrade security architecture, and build on-chain infrastructure for institutional-level assets, stating that "the phase from protocol launch to security incident has ended, and Vault Street will open a new chapter for Resolv."

According to the monitoring by Paitun, 32.4 million wstUSR held by attackers (accounting for 40% of the illegally minted 80 million $USR) have been destroyed. Through direct destruction and blacklisting, the total amount of illegally minted USR has been reduced by approximately 46 million.

According to on-chain analyst Yu Jin's monitoring, about 1 hour ago, Resolv Labs destroyed 36.73 million USR held by the hacker through a contract upgrade.The hacker minted 80 million USR through a minting vulnerability without collateral, of which approximately 34 million USR were sold off by the hacker for 11,409 ETH (24.48 million USD) stored at the address 0x8ED...81C. Additionally, about 46 million USR were destroyed from the hacker's address by the Resolv project team through a contract upgrade. The actual loss from this vulnerability exploitation incident for Resolv is 34 million USD.

According to on-chain analyst PeckShield, there were a total of 20 major hacking incidents in the cryptocurrency sector in March 2026, with total losses reaching $52 million, a staggering 96% increase compared to $26.5 million in February.The most concerning risk this month is the "shadow contagion" effect, where a single event triggers a chain of bad debts across multiple protocols. Major incidents include: ResolvLabs ($USR) suffering an "infinite minting" attack due to an AWS KMS key management vulnerability, resulting in losses of approximately $25 million, an 80% drop in the price of USR, and causing systemic bad debts for protocols such as MorphoBlue, Euler, and Fluid; Venus ($THE) experiencing an on-chain/off-chain combination attack, leaving $2.18 million in bad debts; well-known on-chain figure @sillytuna facing a physical attack and on-chain coordinated strike, resulting in losses of $24 million; and a Kraken whale user (0xC551...acA21) losing $18 million due to a social engineering attack, with hackers transferring some funds through Thorchain to HitBTC.

Lista DAO has released an update on the security incident regarding the stablecoin USR from Resolv Labs on platform X. It disclosed that a total of $8.6 million in related loans was involved, and $8.4 million has been repaid. All positions have been fully redeemed at a 1:1 dollar value, and neither users nor the protocol have incurred any losses.Currently, there is only one outstanding position of approximately $26,000. Lista DAO urges the relevant users to contact the official or Resolv Labs as soon as possible to complete the repayment and close the positions.

Lista DAO has released an update on the security incident regarding the Resolv Labs stablecoin USR on platform X, disclosing that a total of $8.6 million in related loans was involved. So far, $8.4 million has been repaid, and all positions have been fully redeemed at a 1:1 dollar value, with no losses incurred by users or the protocol.Currently, there is only one outstanding position of approximately $26,000 remaining. Lista DAO urges the relevant users to contact the official team or Resolv Labs as soon as possible to complete the repayment and close the position.

Resolv Labs posted on platform X, strongly advising users not to trade or purchase USR stablecoins. On-chain data shows that USR illegally minted by attackers has been mixed with normal USR from before the attack in multiple wallets and continues to circulate in the secondary market. The official pointed out that the illegally minted USR has no collateral support and does not have redemption rights, and any current transactions may involve contaminated assets, increasing the complexity of subsequent asset recovery and handling.Resolv Labs stated that they are still in the early stages of assessing compensation plans for affected users and cannot make any guarantees at this time, and ongoing trading activities may further limit potential compensation options. The team mentioned that they are closely collaborating with relevant protocol parties to develop solutions and will announce more details later.

According to official disclosure, of the approximately 80 million illegally issued USR in the attack incident, about 46 million (approximately 57%) have been removed from circulation through destruction and blacklisting, and currently, there are no further transferable or redeemable assets in the related addresses.Among them, approximately 9 million USR have been destroyed through two transactions, and another approximately 36 million assets stored in the attack-related addresses in the form of wstUSR have completed blacklisting through contract upgrades.

Resolv releases the latest progress on the hacking incident. In the past two days, the pre-liquidation USR wallet has redeemed over 77 million USD, accounting for more than 90% of the total amount for that group. Significant progress has been made in the first phase of recovery work.Currently, the redemption process for this group is actively being completed, and subsequent phases of work will also be carried out to cover the remaining user group.

Fluid officially released the latest progress on the Resolv security incident, disclosing that the current debt repayment work is still ongoing until all affected user funds are covered. Currently, approximately $70 million in USR-related debt on the BNB and Plasma chains has been repaid, and the remaining amount is expected to be settled in the coming days.In addition, a governance proposal has been published on-chain, intending to transfer the remaining USR debt positions to the team's multi-signature address to further complete the liquidation with the Resolv Labs team. A compensation plan for all affected users will be announced soon. The platform's market is operating normally, and user funds remain secure.

Resolv Labs disclosed on platform X that the Resolv team has sent an on-chain message to the attacker's address, proposing to return 90% of the stolen funds (approximately 25 million USD in ETH) in exchange for keeping the remaining 10% as a settlement incentive, with a deadline of 72 hours. If the attacker does not respond within the specified time, Resolv will take escalated measures such as coordinating with centralized exchanges, cross-chain bridges, and infrastructure providers to freeze assets, publicly disclose relevant addresses and transaction traces, collaborate with blockchain analysis companies and law enforcement agencies, and take legal action.Previously, Resolv Labs updated on the security incident, stating that a malicious attacker illegally accessed Resolv's infrastructure through a stolen private key and minted approximately 80 million USD in uncollateralized USR, of which 9 million illegally minted USR have been destroyed.

Resolv Labs issued an update regarding a security incident, stating that a malicious attacker illegally accessed Resolv's infrastructure through a stolen private key and minted approximately $80 million worth of uncollateralized USR. The relevant smart contracts have been quickly paused, and approximately 9 million USR held by the attacker have been destroyed to mitigate potential impact.Currently, the protocol holds about $141 million in assets, with the confirmed actual impact being only about $500,000 in redemptions processed before the pause. The current USR supply consists of approximately 102 million tokens before the incident and about 71 million newly minted illegal tokens. As the first step towards recovery, Resolv plans to allow redemptions of pre-incident USR starting from March 23, 2026, for whitelisted users. Affected users should coordinate directly with RDAL through official channels.The announcement stated that the incident stemmed from unauthorized actions by a third party, including targeted infrastructure attacks. Resolv's underlying collateral has not been directly compromised. The team is tracking and attempting to control the illegally minted USR and other affected assets, coordinating with partners and counterparties, and working with law enforcement and on-chain analysis companies to trace the responsible parties. Resolv strongly advises against trading USR or related Resolv tokens during the implementation of recovery measures, as user trading behavior after the incident may affect the recovery process.

Fluid stated on platform X that the team has secured a short-term loan sufficient to cover 100% of the bad debt currently in the agreement. These funds are committed by Lomashuk, cyberfund, weremeow, and the Fluid core team to ensure the safety of user funds.ResolvLabs has confirmed that it will cover all USR positions generated before the security incident occurred and will open the necessary redemptions to close related debt positions. Additionally, several investors have expressed interest in purchasing FLUID from the treasury when additional funds are needed to further strengthen the protocol's backup support. The Fluid smart contracts are operating normally, all other markets are functioning as usual, the protocol safeguards remain effective, and users may encounter temporary interest rate fluctuations during the liquidation period.

According to monitoring by EmberCN, the remaining 36.74 million USR held by the Resolv attackers is still being sold off, but since the price of USR has dropped by 88%, its current value has shrunk to 2.04 million dollars.The attackers have now exchanged most of the USR for ETH, having purchased a total of 11,437 ETH so far, worth 23.84 million dollars.

Aave founder Stani.eth confirmed in a post on the X platform that their protocol has no exposure to Resolv Labs' stablecoin USR. Resolv only acts as a liquidity provider supplying its supported assets to the Aave protocol. The related assets are currently safe, and the supporting assets themselves have not been affected. Resolv can exit smoothly and has begun repaying its debts. At the same time, this incident has no adverse impact on Aave liquidity providers (LPs) and does not affect the protocol itself.

Coingecko data shows that the stablecoin USR has now depegged by 93.72%, currently reported at 0.053 USDT.

Euler Labs posted on the X platform that it has noted the unauthorized issuance security incident reported by Resolv regarding USR. The team is actively investigating, and as a precautionary measure, the RLP collateral feature in the Euler Yield vault on Arbitrum has been disabled. Euler Earn USDC (Arbitrum) has also stopped allocating funds to Euler Yield.Euler Labs stated that the above measures are aimed at isolating potential risk exposure, and they are currently continuing to assess the impact of the incident. Further updates will be disclosed in a timely manner.