USR Stablecoin Exploit: $25 Million Loss, Token Drops 86%

- Attacker mints 80 million unbacked USR tokens, causing stablecoin to depeg. - Profit of $23 million to $25 million extracted by dumping tokens into DeFi pools. On March 22, 2026, Cointelegraph reported that an attacker targeted Resolv Labs’ USR stablecoin with a critical exploit. The vulnerability affected the stablecoin's issuance mechanics, allowing the attacker to mint 80 million unbacked USR tokens. This flood of new tokens caused the price to crash from its $1 peg to as low as $0.14. The attacker then converted much of the illicitly minted USR into Ether through decentralized finance (DeFi) pools, extracting a reported $23 million to $25 million in value. Resolv Labs clarified that the exploit impacted only the stablecoin’s minting mechanics and that the platform’s collateral pool remained secure. In addition, the company immediately suspended the USR issuance process after the breach. The attack originated with a $100,000 USDC deposit, which the attacker strategically leveraged to exploit the vulnerability and generate the unbacked tokens. The incident triggered swift responses from DeFi protocols exposed to USR. Consequently, several platforms paused trading and isolated vaults to contain risks and prevent wider contagion. Analysts observed that the disruption was largely confined to systems directly integrated with USR. As a result, the broader DeFi ecosystem avoided system-wide repercussions. The incident raised concerns among security professionals about the reliability of traditional smart contract audits, as Resolv Labs’ contracts had undergone multiple reviews. The suspected root cause is a compromised private key, which points to operational security flaws rather than protocol design weaknesses. Therefore, to prevent similar incidents, experts advocate for adopting real-time, AI-powered monitoring systems that can detect anomalies as they happen. At the time of the report, USR had partially recovered from its low of $0.14 to $0.42. However, it remained significantly depegged from its intended value. The incident has intensified industry-wide discussions about enhancing DeFi security protocols, and experts are also focused on implementing safeguards to prevent similar vulnerabilities in the future.