{
 "tag": "resolv",
 "name": "Resolv",
 "group": "Other",
 "incidents": [
  {
   "slug": "resolv-usr-minting-key-compromise-mar-2026",
   "title": "Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens",
   "url": "https://drains.watch/i/resolv-usr-minting-key-compromise-mar-2026",
   "json": "https://drains.watch/i/resolv-usr-minting-key-compromise-mar-2026.json",
   "status": "closed",
   "severity": "critical",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "ethereum"
   ],
   "method": "key-leak",
   "product": "Resolv Labs USR stablecoin and holders",
   "tags": [
    "ethereum",
    "key-leak",
    "resolv",
    "usr",
    "stablecoin",
    "depeg",
    "private-key-compromise",
    "off-chain-signer",
    "minting"
   ],
   "amountUsd": 24500000,
   "victims": null,
   "startedAt": "2026-03-21",
   "closedAt": "2026-04-01",
   "updatedAt": "2026-04-01T12:00:00Z",
   "summary": "On 21 March 2026 an attacker obtained a privileged private key used by Resolv's off-chain minting service, deposited about $100K-$200K in USDC and minted about 80M USR, which the contracts did not cap. They swapped out for about 11,408 ETH, roughly $24.5M, and USR fell to about 26 cents. Resolv paused its app, offered the attacker a 10% bounty and asked holders not to trade USR while it works on recovery."
  }
 ],
 "changes": [
  {
   "incident": "resolv-usr-minting-key-compromise-mar-2026",
   "incidentTitle": "Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-04-01",
   "title": "Halborn's March review attributed the roughly $23M loss to a compromised key of an off-chain service, with no on-chain check on mint amounts.",
   "sourceUrl": "https://www.halborn.com/blog/post/month-in-review-top-defi-hacks-of-march-2026",
   "url": "https://drains.watch/i/resolv-usr-minting-key-compromise-mar-2026"
  },
  {
   "incident": "resolv-usr-minting-key-compromise-mar-2026",
   "incidentTitle": "Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-03-23",
   "title": "Resolv temporarily paused its app and later enabled redemptions while contacting verified holders.",
   "sourceUrl": "https://therecord.media/hacker-breaches-resolv-defi-25-million",
   "url": "https://drains.watch/i/resolv-usr-minting-key-compromise-mar-2026"
  },
  {
   "incident": "resolv-usr-minting-key-compromise-mar-2026",
   "incidentTitle": "Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens",
   "severity": "critical",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-03-21",
   "title": "Using a stolen privileged signing key, the attacker deposited roughly $100K-$200K in USDC, minted about 80M unbacked USR and traded it for about 11,408 ETH; USR fell to about 26 cents.",
   "sourceUrl": "https://therecord.media/hacker-breaches-resolv-defi-25-million",
   "url": "https://drains.watch/i/resolv-usr-minting-key-compromise-mar-2026"
  }
 ]
}