Attacker drains over $9 million from Resupply stablecoin protocol after manipulating token price
Quick Take Resupply, a stablecoin protocol tied to lending market liquidity, was exploited for around $9.5 million. Resupply acknowledged the incident and said the compromised contract has been identified and paused.
Stablecoin protocol Resupply was exploited for around $9.5 million through a market manipulation of exchange rates, according to security analysts.
Resupply is a stablecoin protocol that leverages the liquidity and stability of lending markets.
The exploit centered on cvcrvUSD, a wrapped version of Curve USD (crvUSD) staked in Convex Finance. Analysts said the attacker artificially inflated the price of cvcrvUSD by sending donations, which caused its share price to spike.
“The hacker exploited the cvcrvUSD vault, allowing the attacker to borrow $10 million in reUSD with only 1 wei of share as collateral,” said Xuxian Jiang, founder and CEO of PeckShield.
Resupply’s smart contract, known as ResupplyPair (CurveLend: crvUSD/wstUSR), used this inflated cvcrvUSD price in its exchange rate calculations. As a result, the rate crashed, noted security analysts.
The attacker took advantage of this price distortion by invoking the borrow function in the ResupplyPair contract. This allowed them to borrow 10 million reUSD (Resupply's native stablecoin) using only one wei of cvcrvUSD as collateral.
The missing funds originated from the wstUSR market, which the attacker exploited through borrowing, explained analysts at Blocksec.
Analysts added that the attacker later converted the borrowed reUSD into other assets on external markets for profit.
Resupply confirmed the exploit and said the affected contract has been identified and paused.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Australian Dollar breaks 0.69 as hot US CPI raises 50-bp Fed hike risk
Philadelphia Fed President Paulson supports gradual rate hikes but warns inflation is still “stuck ” above target
Core inflation is "stuck" in the 2.5%-3% range, with triple pressures from tariffs, energy, and AI data center demand. Paulson insists on gradual rate hikes while setting clear trigger conditions—if inflation expectations shift upwards or wage pressures build, he will move more quickly. Meanwhile, Governor Waller stated that if October's core CPI rises 0.3% month-on-month, a 50 basis point rate hike in December should be considered. Dallas Fed's Logan said at least two more rate hikes are needed.
During Anthropic IPO roadshow, OpenAI also discloses financial data: Q3 revenue falls short, losses far exceed expectations
OpenAI's revenue in Q3 reached $10 billion, marking a nearly 50% quarter-on-quarter increase. Its annualized run rate is approximately $50 billion, but operating losses have expanded from $10.1 billion to $10.9 billion. Competitor Anthropic has begun its IPO roadshow, with Q3 revenue of $17 billion and losses of only $567 million, leading in both scale and profitability.
Petrobras (PBR.US) Achieves Record Oil and Gas Production in Q3; Adjusted Net Profit Up 78% Year-on-Year, Raises Full-Year Production and Capital Expenditure Guidance
Petrobras released its Q3 2026 financial results after the US market close on November 10.
Crypto prices
More
