Resolv Halts Protocol After Key Compromise Mints $80M Unbacked USR, Stablecoin Depegs

Resolv has paused its protocol after a private key compromise allowed an attacker to mint about $80 million of uncollateralized USR, triggering a steep depeg and renewed scrutiny of the stablecoin's accounting. In a team update, Resolv said the attacker gained unauthorized access to its infrastructure and issued new USR without backing. The protocol's smart contracts were paused quickly, and roughly 9 million USR held by the attacker has since been burned. Resolv added that the collateral pool itself was not directly compromised. The only confirmed loss to date is about $0.5 million from redemptions processed before the pause. Supply inflation, not collateral theft Unlike many DeFi incidents that drain protocol assets, this event primarily inflated USR supply. Resolv said about 102 million USR was in circulation before the exploit. Afterward, an additional roughly 71 million USR was minted without collateral, diluting backing and pushing total supply well above the value of the protocol's assets. Minting permissions draw scrutiny While Resolv attributed the incident to infrastructure access tied to a compromised key, the episode has highlighted the protocol's minting design. A privileged role could authorize issuance without sufficient onchain verification of collateral, enabling large-scale minting once access was obtained. The structure effectively depended on trusted offchain controls to enforce limits. USR breaks the peg The market repriced USR sharply following the supply shock. USR was trading near $0.19 at the time of writing, down more than 56% over the past 24 hours, according to CoinMarketCap. Trading activity also weakened as users reduced exposure during the recovery. Redemptions and recovery plans Resolv said it is preparing to reopen redemptions for pre-incident USR holders, starting with allowlisted users. The protocol currently holds about $141 million in assets, and the team said it is working with partners, analytics firms, and law enforcement to trace and contain illicitly minted tokens. Users have been advised not to trade USR or related assets during the recovery phase, noting that post-exploit activity could affect outcomes. Broader implications The incident underscores a recurring DeFi risk: critical safeguards that rely on offchain controls rather than onchain-enforced limits. Even with collateral intact, the ability to mint unbacked tokens has damaged confidence in USR's backing. Restoring trust will hinge on isolating the illicit supply and reestablishing credible accounting. Final Summary Resolv's exploit expanded USR supply by roughly $80 million without directly draining collateral, exposing vulnerabilities tied to offchain control mechanisms. USR's depeg reflects a sharp loss of confidence, and recovery now depends on containing the illicit issuance and restoring the integrity of the stablecoin's backing.