A large-scale security breach struck the USR stablecoin on Sunday, with a significant exploit of its minting contract leading to the creation of tens of millions of tokens from a minimal capital base. The protocol, operated by Resolv Labs, suffered the attack in the early hours of the morning, resulting in drastic market impacts and renewed scrutiny of security practices for decentralized finance (DeFi) projects.
Minting Flaw Enables Rapid Token Creation
Resolv Labs is a development team focused on stablecoin and DeFi infrastructure. Its USR token is designed as a yield-bearing stablecoin, typically backed by assets in crypto lending markets. Before the incident, the protocol was noted for its rapid growth and had amassed over $500 million in total value locked.
The attack reportedly occurred around 2:21 AM UTC. Blockchain security analysts describe how the perpetrator utilized only about 100,000 USDC in the USR Counter contract to mint 50 million USR. On-chain records show that, in total, approximately 80 million USR tokens were produced using a reported $200,000 in funding, suggesting a minting ratio more than 500 times the expected value. The flaw is suspected to involve a vulnerability in contract logic or an exploited cryptographic signer.
Market Shock and Immediate Fallout
The large-scale issuance triggered an immediate collapse in USR’s value. The stablecoin plunged 74.2% to $0.257 shortly after the exploit, then recovered partially to around $0.85, without regaining its dollar peg. Many liquidity providers and vault users linked to the protocol took substantial losses during the sudden sell-off.
As the attack unfolded, the malicious actor rapidly dumped USR tokens on decentralized exchanges including KyberSwap and Velora. The sales yielded over $17 million in USDC and USDT, soon converted to approximately 9,100 ETH, worth about $4.55 million at market prices. Blockchain monitoring tools tracked these transactions in real time, highlighting a carefully executed plan to cash out the exploited tokens.
The incident was quickly flagged by crypto analyst @ai_9684xtpa on social platforms, pointing out the glaring 500-fold disparity in the minting process. Noted security firm PeckShield confirmed the figures, stating that around $80 million of USR had been minted, with substantial conversion to ETH already completed.
This makes another stablecoin incident, as the USR price briefly fell to $0.257—a 74.2% drop—then moved back up to $0.8606. The Resolv team had yet to address the situation publicly at this point.
Amid the chaos, warnings circulated to users of vaults associated with the protocol. Activity by blockchain trackers indicated that funds were being moved rapidly between wallets, further complicating the response prospects for Resolv Labs and affected users.
As of now, Resolv Labs had issued no official communication regarding the exploit. DeFi community members issued renewed calls for thorough, real-time audits of minting contracts and other protocol-critical mechanisms. Many pointed to recent incidents across the ecosystem as evidence for the need for more robust security ahead of major liquidity events.
