Connect with us
DAPA Banner

Crypto World

Resolv hack shows DeFi learned nothing from last contagion

Published

on

Resolv hack shows DeFi learned nothing from last contagion

Sunday’s $23 million hack of Resolv’s stablecoin USR has led to contagion across the DeFi sector.

Opportunistic traders used depegged USR to borrow against, draining liquidity in over a dozen yield vaults.

To make things worse, so-called “risk curators” then automatically allocated more funds to broken markets as lending rates spiked.

In November, a similar contagion hit DeFi’s “curated” vault ecosystem after Stream Finance announced a $93 million loss, leading to a 75% of xUSD.

Advertisement

Despite discussions of risk ratings and curators putting up first-loss capital in the aftermath, it appears not much was learned, after all.

Read more: Four months on, MEV Capital falls victim to $4B DeFi daisy chain implosion

The hack

Resolv Labs’ statement confirmed that a private key compromise led to the unauthorized (and unrestricted) “minting of approximately $80 million of uncollateralized USR.”

USR’s pre-hack token supply remains fully backed, with losses coming from liquidity providers (LPs) on decentralized exchanges as the hacker sold the minted tokens. For example, LPs on Curve Finance alone are estimated to have lost $17 million.

Advertisement

The hacker’s sell-off caused a depeg of USR, which is currently trading at $0.23, according to CoinMarketCap data. Blockchain security firm Beosin puts the attacker’s profits at 11,409 ether (ETH), worth over $23 million at the time of writing.

The Resolv team faced criticism for a slow response time while collecting the necessary multisig signatures to pause the protocol.

It has contacted the exploiter on-chain, requesting return of 90% of the converted ETH, as well as the remaining USR.

Read more: Venus Protocol hacker lost $4.7M after nine months of planning

Advertisement

The fallout

The hack may have been simple, but the knock-on effects have been anything but.

Depegged USR was pounced upon by opportunistic traders who used it to drain yield vaults with hardcoded price oracles. In buying cheap USR to use as collateral, users could borrow other assets, such as USDC, as if USR were still worth $1.

Read more: Oracle error adds to turmoil at DeFi giant Aave

As if things weren’t bad enough, “risk curators” automated strategies then allocated further funds to the affected markets, whose high utilization had spiked supply yields.

Chaos Labs’ Omer Goldberg explained how Morpho’s Public Allocator feature allowed curators “including Gauntlet, re7, kpk, and 9summits” to autoallocate millions of dollars worth of assets into markets “based on pre-configured and approved caps and credit lines.” 

Advertisement

In some cases, Goldberg says, allocation into broken vaults continued for hours.

The chaos also brought innovation, however, as the auto-allocations were even specifically targeted to free up additional liquidity. Enterprising competitors Obsidian also capitalized on the incident, offering a migration service to users whose deposits are stuck in illiquid Morpho vaults

Assessing the damage

Morpho’s Paul Frambot tallied 15 affected vaults with over $10,000 of exposure to USR.

According to security researcher Weilin Li, curators of the affected vaults, on Morpho and elsewhere, include Gauntlet, Re7, MEV Capital, Extrafi, Seamless, August, Clearstar, kpk, Leyrock and 9Summits. 

Advertisement

For those who followed November’s collapse, many of these names may be familiar.

Yearn, whose contributors were amongst the harshest critics of the yield vaults which led to November’s crash, suffered a minimal loss of $377.

Ironically (or tellingly), Resolv’s own risk manager, Steakhouse, wasn’t exposed to USR, despite stating that “operationally, Resolv demonstrates institutional rigor” just five days before the hack.

The backing of Inverse Finance’s DOLA stablecoin was indirectly exposed to the depeg of USR, with the team pledging to patch the $340,000 hole.

Advertisement

A number of lending markets paused USR markets, including Venus Protocol, which was itself hacked last weekend, and Lista

Fluid was the worst hit, and may have accrued up to $17.5 million of bad debt. However, the team reassured users that it had “secured short-term loans to cover 100% of the bad debt.”

It also considers selling FLUID tokens “should any additional funds be required.”

Following a dicey few months for top dog lending protocol Aave, with governance drama and an oracle mishap, Aave Labs’ Stani Kulechov was keen to highlight Aave’s lack of exposure.

Advertisement

DeFi daisy chain

The web of platforms affected by the compromise of a single private key is a stark reminder of how one of DeFi’s key innovations, interoperability, is a double-edged sword.

Automated allocation may optimize returns under normal conditions, but when things break, which they often do in DeFi, unintended behavior follows.

Without their own funds in play, the current setup incentivises “malicious game theory pushing [curators] to seek more risk.”

This latest episode has renewed calls for curators to have skin in the game. One approach is tranching of deposits, with curators set to lose out first should their risk be improperly “curated.”

Advertisement

Got a tip? Send us an email securely via Protos Leaks. For more informed news, follow us on XBluesky, and Google News, or subscribe to our YouTube channel.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Treasury Secretary Bessent now says it’s OK for the Fed to wait to lower rates amid oil surge

Published

on

The Fed will most likely 'asterisk' inflation from tariffs and the war as one-offs, says Jim Cramer

U.S. Treasury Secretary Scott Bessent waits for the first meeting of U.S. President Donald Trump’s anti-fraud task force convened by U.S. Vice President J.D. Vance at the Eisenhower Executive Office Building on the White House campus in Washington, D.C., U.S., March 27, 2026.

Jonathan Ernst | Reuters

U.S. Treasury Secretary Bessent said the Federal Reserve could wait to lower interest rates amid the oil spike, in a departure from his previous stance on monetary policy.

Advertisement

“Do I think rates should be lowered? Eventually. I think now that we have to wait and see,” Bessent told Semafor Editor-in-Chief Ben Smith at the Semafor World Economy conference in Washington, DC.

Bessent has previously said that Fed Chair Jerome Powell should hasten cutting interest rates, saying in January that reductions are “the only ingredient missing for even stronger economic growth. Which is why the Fed should not delay.”

But the change in thinking comes amid the ongoing war in Iran, which has driven up oil prices to above $100 a barrel.

That complicates the Fed’s mandate, as it eyes rising inflation alongside slowing growth. The central bank was last expected to hold rates steady this year, with the slimmest possibility of a hike, according to fed funds futures pricing.

Advertisement

Coming out of “January and February — the economy was very strong,” Bessent told Semafor.

Powell’s term as chair is up in May, but he could have to stay on longer if Trump’s chair nominee which Bessent helped select, Kevin Warsh, can’t get confirmed by the Senate by the time. Sen. Thom Tillis has vowed to block a Warsh vote until U.S. Attorney Jeanine Pirro ends her criminal probe into Powell related to Fed building cost overruns. Powell has said the probe is designed to put pressure on him by the Trump administration for not cutting rates more.

See the full Semafor story here.

— CNBC’s Jeff Cox contributed to this report.

Advertisement
The Fed will most likely 'asterisk' inflation from tariffs and the war as one-offs, says Jim Cramer
Choose CNBC as your preferred source on Google and never miss a moment from the most trusted name in business news.

Source link

Continue Reading

Crypto World

Polygon Is Fixing Crypto’s Idle Capital Problem

Published

on

Polygon Is Fixing Crypto’s Idle Capital Problem

Crypto has a capital efficiency problem.

For all the innovation we’ve seen in DeFi, a huge amount of onchain capital still sits idle. It’s staked, it’s locked, and it’s largely cut off from the rest of the financial system we’ve been building. That might have been acceptable a few years ago, but it doesn’t work for institutions.

Idle capital isn’t just inefficient, it’s incompatible with how modern financial systems operate.

Institutions don’t separate staking and markets in their thinking. They look at capital in terms of how hard it can work. Can it move? Can it generate yield? Can it be deployed across strategies without friction? If the answer is no, that capital becomes less attractive.

Advertisement

The same is increasingly true in payments. Once money moves onchain, it shouldn’t just sit idle between transactions. It should be programmable, composable, and capable of generating yield even while it’s waiting to be used.

That’s the gap we’re focused on solving at Polygon Labs.

With the launch of sPOL, we’re introducing a canonical liquid staking standard for POL. In simple terms, it allows users to stake POL while still keeping that capital liquid and usable across onchain markets. You continue earning staking rewards, but you also gain the ability to deploy that same capital in trading, lending, and collateral strategies.

This is especially powerful in payments contexts, where capital often sits at rest between settlement cycles, treasury rebalancing, or cross-border flows. Instead of remaining idle, that capital can stay productive without sacrificing availability.

Advertisement

That combination is what makes capital actually competitive.

If you look at Ethereum, liquid staking has already become a core part of the ecosystem. More than 40 percent of staked ETH is used in this way. On Polygon, it’s closer to 4 or 5 percent. That gap isn’t about demand. It’s about infrastructure.

Without a clear standard, liquidity fragments. Without liquidity, institutions don’t show up in size.

sPOL is designed to change that.

Advertisement

When you stake POL, you receive sPOL, which represents your position and continues to earn yield. At the same time, it can be used across DeFi just like any other liquid asset. That means funds, market makers, and treasury teams can run more sophisticated strategies without giving up staking rewards or waiting through unbonding periods.

It also means payment providers, fintechs, and onchain businesses can treat idle balances not as dead weight, but as yield-generating assets that remain fully usable.

It turns staking from something passive into something you can actively manage.

But usable capital only matters if markets can support it.

Advertisement

From day one, we’re seeding deep liquidity so sPOL is immediately functional at scale. We’re also integrating with venues like Uniswap v4 to ensure efficient execution and real market depth. At the same time, validator incentives are being structured to deliver more competitive yields, aligning participants across the network.

This is about building the conditions institutions expect as a baseline.

The impact is straightforward. There are billions of POL already staked. Even partial adoption of sPOL significantly expands the amount of capital actively participating in the ecosystem. That leads to deeper markets, better pricing, and more resilient liquidity.

It also strengthens the network itself. As more POL moves into productive staking positions, supply tightens and incentives align more clearly with long term participation.

Advertisement

Stepping back, this is part of a broader shift.

Crypto is moving from experimentation to infrastructure. Stablecoins are becoming settlement layers. Real world assets are coming onchain. Institutions are no longer just watching, they’re allocating.

And as payments infrastructure moves onchain, expectations change. Capital isn’t just meant to move faster, it’s meant to work continuously, even in the moments between movement.

But they will only scale into systems that meet their standards.

Advertisement

They need liquidity. They need composability. And they need capital that can be both productive and flexible at the same time.

That’s what we’re building with sPOL.

It’s not just an upgrade to staking. It’s a step toward making Polygon a place where capital behaves the way modern markets expect it to.

Because ultimately, the question isn’t how much capital is onchain.

Advertisement

It’s how much of it is actually working, and where it chooses to work.

The post Polygon Is Fixing Crypto’s Idle Capital Problem appeared first on BeInCrypto.

Source link

Advertisement
Continue Reading

Crypto World

Scroll moves to trim governance operations after major protocol defection

Published

on

Scroll moves to trim governance operations after major protocol defection

The decentralized autonomous organization (DAO) behind Ethereum layer-2 network Scroll said it will propose a plan to dissolve its Security Council and transfer control of the network to an account managed by an internal team.

The proposal announcement comes two months after Scroll’s top fee-generating decentralized application (dapp), crypto neobank Ether.fi, moved to Optimism’s OP mainnet. That saw roughly 300,000 user accounts and more than $160 million in total value locked move away from the network.

In a governance update, a Scroll core contributor said the Security Council was simply too expensive. Scroll is laying off several contributors within the DAO and reducing the capacity of its operational committees. The handover is targeted for the next 10 days, pending support from the current council.

“After evaluating the Security Council’s cost relative to its actual usage over the past quarters, we believe continuation is no longer justified,” the post reads.

Advertisement

The project said all contract changes would be executed transparently and remain verifiable onchain.

Adding to the network’s turbulence, a recent surge in Scroll’s network fees appeared to be artificially manufactured rather than a sign of organic demand.

Over six days in early April, the network raised the amount it charges to publish data to the Ethereum mainnet by a factor of 1,280, creating the illusion of a massive spike in 30-day chain fee momentum, according to analysis from L2BEAT.

The adjustment forced users to pay over $50,000 in excess transaction fees for data posting that ordinarily would have cost roughly $280. The extreme, temporary repricing was rolled back on April 9.

Advertisement

Ether.fi’s migration moved around $13 million in annualized fees away from Scroll, according to DeFiLlama data, and trimmed the network’s TVL to around $23 million.

Source link

Continue Reading

Crypto World

XRPL Taps Boundless for Bank-Grade Privacy on Public Chains

Published

on

Ethereum, Privacy, zk-Rollup, Institutions

The XRP Ledger (XRPL) used by blockchain payments company Ripple has tapped Boundless, a zero-knowledge infrastructure provider, to let banks and asset managers execute confidential yet compliant transactions directly on the network, according to a Tuesday release shared with Cointelegraph.

Boundless chief executive Shiv Shankar told Cointelegraph the design aims to shield details like transaction size, frequency and counterparties from public view, while still allowing regulators to audit activity via selective disclosure and role-based access controls.

Boundless’ integration is meant to enable a range of institutional use cases that have historically been challenging to run on fully transparent ledgers. Those include cross-border business-to-business payments, treasury and capital management, over-the-counter positions, tokenized asset issuance and decentralized exchange or lending activity, where order flow and positions are highly sensitive, according to Shankar.

For public blockchains, that trade-off between transparency and confidentiality has become a central barrier to institutional adoption, as banks and asset managers seek to protect trading strategies and client activity without falling out of step with regulatory oversight. 

Advertisement

The move positions XRPL in an increasingly competitive race to deliver bank-grade privacy on public blockchains, as institutions push to avoid what Shankar described as the “transparency tax” of fully visible onchain activity.

Privacy race expands across ZK and FHE approaches

In March, cryptography company Zama integrated its fully homomorphic encryption (FHE) stack with institutional tokenization platform T-REX, pitching its technology as a confidentiality layer for ERC-3643 securities (tokenized financial instruments that embed compliance rules into the token standard) on upcoming T-REX public networks.

Related: Moody’s brings credit ratings onchain with Canton Network integration

Other projects are betting on different flavors of zero-knowledge technology, including zkSync’s Prividium environment, which aims to anchor private institutional execution to Ethereum via ZK proofs while keeping raw transaction data off public view.

Advertisement

Shankar said that projects like zkSync require institutions to launch their own layer-2s, which involves greater investment and overhead. In contrast, Boundless deploys solutions via smart contracts, which he said allows institutions to “stay where the liquidity is” (on Ethereum), and “gain more flexibility on where they deploy their products.”

Shankar said the design aims to replicate the selective disclosure controls of traditional finance in an onchain environment, rather than forcing institutions to choose between privacy and compliance.

Privacy shifts from feature to core infrastructure

The rollout highlights how privacy is becoming a feature of base-layer and tokenization infrastructure rather than an optional add-on.

The tokenized asset market reached $29.25 billion in April 2026, up 7.9% in a month, according to data from RWA.xyz.

Advertisement
Ethereum, Privacy, zk-Rollup, Institutions
Total RWA value. Source: RWA.xyz

As more real-world assets migrate onchain and traditional players experiment with tokenized funds, deposits and securities, pressure is mounting on networks to accommodate both institutional secrecy and supervisory oversight.

Magazine: XRP yet to ‘price in’ 3 bullish catalysts, Bitcoin to $80K? Trade Secrets