A major security incident has impacted Resolv Labs after a malicious actor gained access to internal infrastructure through a compromised private key. This access allowed the attacker to mint close to 80 million USR tokens without any collateral backing.

This was not a typical smart contract bug. The contracts themselves were not reported as faulty. Instead, the issue came from access control, which made it possible to mint tokens outside normal protocol rules.

The team detected the issue quickly and paused relevant contracts to stop further damage. A full post mortem is currently being prepared and is expected to explain exactly how the compromise happened and what safeguards will be improved.

• Containment Measures Burns and Blacklisting
• Market Risks Illicit USR Still Circulating
• Recovery Process Redemptions Begin
• Ongoing Investigation and Response

Most importantly, the protocol confirmed that its underlying collateral pool was not directly affected. This meant that while fake tokens were created, the real backing assets were still intact. This separation helped prevent a full scale collapse and gave the team room to respond in a controlled way.

Containment Measures Burns & Blacklisting

Once the exploit was contained, the team moved quickly to reduce the impact of the illicit supply. Out of the 80 million USR minted during the attack:

• Around 46 million tokens have already been removed from circulation
• About 9 million USR was burned through onchain transactions
• Around 36 million USR was blacklisted, mainly in wrapped token form
• Remaining exploiter held balances were also removed

These steps ensured that the attacker could no longer move or benefit from the majority of the illicit tokens. The protocol also confirmed that no illicit USR remains in wallets directly controlled by the attacker.

This notice is issued on behalf of Resolv Digital Assets Ltd. in relation to the Resolv protocol.

Earlier today, a malicious actor gained unauthorized access to Resolv infrastructure through compromised private key, resulting in the minting of approximately $80M of…

— Resolv Labs (@ResolvLabs) March 22, 2026

Market Risks Illicit USR Still Circulating

Even with strong containment, one major issue remains. Illicit USR has already entered the broader market, and onchain data shows that these tokens have mixed with legitimate USR across multiple wallets.

They have also been actively traded in secondary markets and continue to move between users, making it increasingly difficult to distinguish between valid and unbacked tokens. This creates uncertainty for anyone interacting with the token. It becomes difficult to tell whether a token is backed or not.

Resolv has clearly advised users not to trade or acquire USR at this stage. Any transaction could involve tokens that have no collateral and no redemption rights.

This situation highlights a common challenge in crypto. Once bad assets spread across open markets, fully separating them becomes very difficult.

Over the past 2 days, $77M+ has been redeemed for allowlisted wallets with pre-exploit USR, representing 90%+ of this group and marking strong progress in phase one of recovery.

Next:
• Redemption process for this group is actively being completed
• Work on subsequent phases,… https://t.co/OVWpwBlH4T

— Resolv Labs (@ResolvLabs) March 25, 2026

Recovery Process Redemptions Begin

While containment focused on limiting damage, recovery efforts are now centered on protecting legitimate users. So far, more than 77 million dollars has been redeemed for allowlisted wallets, covering over 90 percent of eligible pre exploit holders. The redemption process is being carried out in phases to ensure a structured and fair recovery.

The first phase prioritizes users who held USR before the incident. These wallets are being verified and processed first to ensure fair recovery. The next phases will focus on remaining users, but the team has been clear that outcomes may vary depending on how the situation evolves.

Ongoing Investigation & Response

Resolv is actively working to understand the full scope of the attack and identify the responsible party. The team has stated that they will pursue all possible actions to recover assets and hold those responsible accountable.

This incident highlights an important point. Not all risks in DeFi come from smart contracts. Even strong protocols can face serious risks if access layers are not properly secured.

Still, once tokens enter the open market, full cleanup becomes difficult. That remains one of the biggest challenges in DeFi incidents.

The Resolv exploit created a large amount of unbacked USR, but the situation has been managed more effectively than many similar incidents. A significant portion of the illicit supply has already been removed, and most legitimate users have started receiving redemptions.

However, risks still exist due to circulating tokens that may not be backed. Users should remain cautious until the situation is fully resolved.

If you find any issues in this blog or notice any missing information, please feel free to reach out at yash@etherworld.co for clarifications or updates.

To promote your Web3 articles, events, and projects, you may reach out anytime via EtherWorld PR for submissions and collaboration.

Related Articles

1. Breaking: SEC Stops Treating Crypto Devs Like Criminals - What are the New Rules?
2. India, Australia, Germany, US: A Global Look at Cryptocurrency Regulation
   
3. Jiocoins Launched by Jio on Polygon – What Does This Mean for Jio & Ethereum?
4. Jane Street Accused of Crypto Market Manipulation
5. Fidelity Launches USD-Backed Stablecoin FIDD

To follow blockchain news, track Ethereum protocol progress, and read our latest stories, subscribe to our weekly today.