Connect with us
DAPA Banner

Crypto World

DeFi Has Seen Resolv’s $25M USR Exploit Many Times Before

Published

on

the-defiant

The Resolv hack wasn’t a surprise. The same structural flaw has drained hundreds of millions from Morpho, Euler, and Fluid over the past year and the industry kept building on top of it anyway.

On a quiet Sunday morning, someone turned $100,000 into $25 million in about seventeen minutes.

The target was Resolv, a yield-bearing stablecoin protocol. By the time Resolv paused its contracts, its dollar-pegged stablecoin USR had crashed to pennies. It remains deeply depegged, trading around $0.25 as of this writing, down more than 70% on the week.

The blast radius extended well beyond Resolv. Fluid/Instadapp absorbed more than $10 million in bad debt and had outflows of over $300 million in a single day, the worst outflow in its history. Fifteen Morpho vaults were hit. Euler, Venus, Lista DAO, and Inverse Finance all moved to pause USR-related markets.

Advertisement
the-defiant

The mechanism that caused the initial hack to spread its damage – pricing a depegged stablecoin at $1 in a lending market– is not new. It happened at least four times in the past fourteen months.

How the Hack Worked

USR’s minting followed a two-step off-chain process: a user deposited USDC via the `requestSwap’ function, and a privileged off-chain signing key, the `SERVICE_ROLE’, finalized the amount of USR to issue via `completeSwap’. The contract enforced a minimum output but had no maximum. Whatever the key holder signed, the contract honored.

The attacker gained access to that key through Resolv’s AWS Key Management Service. They submitted two USDC deposits, totaling roughly $100,000–$200,000, and used the compromised key to authorize 80 million USR in return. Etherscan shows two transactions worth 50 million USR and 30 million USR, minted in minutes.

“The Resolv USR exploit wasn’t a bug — it was a feature working exactly as designed. And that’s the problem,” said on-chain analyst Vadim (@zacodil).

The SERVICE_ROLE was a regular externally owned address, not a multisig. The admin key had multisig protection, but the mint key didn’t.

Advertisement

“Resolv was audited 18 times,” Vadim said. “One finding was literally called ‘Missing upper [limit]’”

The attacker exited methodically, converting minted USR into wstUSR (the staked wrapped version) to slow the market impact, then rotating through Curve, Uniswap, and KyberSwap into ETH. The attacker’s wallet holds approximately 11,400 ETH (~$24M). Resolv’s collateral pool, the ETH and BTC backing the system, survived intact even as the stablecoin crashed.

How the Contagion Spread

The Resolv hack is two incidents stacked on top of each other. The first is the mint exploit. The second is a cascading lending market failure.

When USR and wstUSR collapsed, every lending market that had accepted them as collateral faced the same problem: their oracle was still pricing wstUSR near $1.

Advertisement

Omer Goldberg, founder of risk analytics firm Chaos Labs, documented the mechanism. His key finding was that “The oracle is hardcoded and thus never repriced. wstUSR was marked at $1.13 while trading at ~$0.63 on secondary markets.”

Traders bought cheap wstUSR on the open market and posted it as collateral at the oracle’s $1.13 valuation on Morpho or Fluid, then borrowed USDC against it and walked away.

At Fluid, the team secured short-term loans to cover 100% of the bad debt and committed to making every user whole. At Morpho, co-founder Paul Frambot said ~15 vaults had significant exposure, all in high-risk, long-tail collateral strategies.

Prominent curator Gauntlet said that “A few high-yield vaults had limited exposure.”

Advertisement

But D2 Finance challenged that framing directly, posting onchain data showing Gauntlet’s flagship “USDC Core vault” had $4.95M allocated to the wstUSR/USDC market. Goldberg later said Gauntlet vaults accounted for 98% of lender liquidity in that market.

“I think the curator industry is poorly designed because there’s not actual curation happening,” said Marc Zeller on X.

Resolv, Gauntlet, Morpho and Fluid did not respond to The Defiant’s requests for comments by press time.

A Recurring Failure

This is not a novel attack. In January 2025, Usual Protocol’s USD0++ was hardcoded at $1 on Morpho vaults by curator MEV Capital. Usual abruptly changed its redemption floor to $0.87 without warning, leaving lenders stuck in the MEV Caital vault as utilization spiked to 100%.

Advertisement

In November 2025, Stream Finance’s xUSD collapsed after curators had routed USDC deposits into leverage loops backed by the synthetic stablecoin, leaving an estimated $285M–$700M at risk across Morpho, Euler, and Silo when its oracle refused to update. Moonwell suffered back-to-back oracle failures in October and November 2025, generating more than $5 million in combined bad debt.

What It Means for the Curator Model

Morpho’s architecture outsources all risk decisions to third-party “curators” who build vaults, choose collateral, set loan-to-value ratios, and select oracles. The theory is that specialist firms have deeper expertise, competition drives better risk management, and the protocol enforces rules.

But curators earn fees on yield generated, which creates an incentive to accept riskier, higher-yield collateral, like yield-bearing stablecoins. The downside is that when those stablecoins depeg, the losses fall on depositors, not on the curator. In the Resolv case, some curators had automated bots still refilling affected vaults hours after the exploit started, deepening losses.

The reason to hardcode oracles for yield-bearing stablecoins is to prevent short-term volatility from triggering unnecessary liquidations. But that protection only works as long as the stablecoin remains stable.

Advertisement

Chainalysis said in a post-mortem that real-time chain detection is needed.

“The on-chain smart contract worked perfectly. The broader system design and off-chain infrastructure apparently did not,” the analytics firm said.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Glider, Ondo Launch Custom Tokenized Stock Portfolios Without Brokers

Published

on

Glider, Ondo Launch Custom Tokenized Stock Portfolios Without Brokers

Glider and Ondo Finance have introduced a platform to let retail investors build and automate custom portfolios of tokenized US stocks, offering direct exposure to equities without a brokerage account.

According to the announcement, the platform allows users to create personalized baskets of onchain stocks that track real-world assets, removing the need for wallets, gas fees or manual transaction management.

Glider co-founder and CEO Brian Huang told Cointelegraph that unlike traditional exchange-traded funds, which bundle assets into fixed products, the platform lets users construct index-like portfolios with custom weightings that are automatically maintained, avoiding reliance on pooled products.

The platform automatically executes and rebalances these portfolios, allowing users to gain exposure to tokenized equities without managing individual trades. The assets track underlying shares and can be traded beyond standard market hours.

Advertisement

Huang added that the model avoids the liquidity constraints that have limited earlier tokenized ETF offerings. He said:

“This is the first time direct indexing has been offered for onchain stocks… The problem that all ETFs have had on chain is liquidity. There’s no liquidity constraint on Glider because these are directly indexed. You hold the underlying assets and tap into their underlying liquidity.”

Tokenized stocks on Ondo’s platform are designed to mirror the price of their underlying shares and can be transferred and traded onchain, while Glider automates portfolio construction and rebalancing without requiring users to execute transactions manually.

The initial rollout will focus on tokenized US equities, with plans to expand into additional asset classes such as commodities, while also introducing features that allow users to lend positions and generate yield on their holdings.

Advertisement

A spokesperson for Ondo said the platform is not currently available to US users but said the company holds several SEC registrations, positioning it for a potential future launch in the United States.

Related: Binance adds Ondo’s tokenized stocks in latest RWA push

Tokenized stocks grow alongside evolution of crypto ETPs

Tokenized equities and crypto exchange-traded products (ETPs) have both expanded rapidly over the past year. 

Data from RWA.xyz shows the total value of tokenized real-world assets (RWA) has grown sharply to around $26.5 billion, up from around $7.5 billion the same time last year. Among the RWAs onchain, around $908.5 million are tokenized stocks.

Advertisement
Tokenized real-world assets. Source: RWA.xyz

At the same time, crypto ETPs have moved beyond spot Bitcoin (BTC) and Ether (ETH) funds, with issuers increasingly exploring more complex and actively managed products.

In February, crypto ETP issuer 21Shares launched a new product offering European investors exposure to a preferred stock issued by Michael Saylor’s Strategy, the largest public holder of Bitcoin. The 21Shares Strategy Yield ETP is available to institutional and retail investors and offers a dividend linked to Strategy’s Bitcoin holdings.

21Shares president Duncan Moir told Cointelegraph the product improves access to Strategy’s STRC preferred stock, which is not widely available or easily cross-listed, while expanding distribution and liquidity through its ETP structure.

He added that the structure also simplifies tax treatment for European investors by handling reporting and withholding at the product level. Moir said:

It’s probably the product we’re seeing the most interest in across multiple regions. From the day we launched it, we’ve had more inbound inquiries to the sales team than for any crypto product, to be honest.

Earlier this month, BlackRock expanded its crypto lineup with a Nasdaq-listed product tied to Ethereum staking. The iShares Staked Ethereum Trust ETF (ETHB) provides spot Ether exposure while generating potential monthly income by staking a portion of its holdings.

Advertisement

However, BlackRock’s head of digital assets, Robert Mitchnick, said the asset management behemoth plans to remain cautious in expanding its crypto ETF offerings, despite growing interest in more complex structures.

Magazine: Big Questions: Can Bitcoin save you from the dreaded Cantillon Effect?