Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

Resolv (USR)

stablecoin issuer · Global · Resolv

Confirmed cyberStatus: recoveringTier 1Severity 3 of 5Evidence confidence: mediumAnalyst-verified

An attacker used a compromised minting key to create about 80M USD of unbacked Resolv USR around 22 Mar 2026; Resolv paused the protocol and limited redemptions to verified pre-incident holders as USR lost its peg.

First disruption
Mar 22
First public signal
Mar 22 (on-chain detection of unbacked USR mint; Resolv post)
Acknowledged
Mar 22
Restored
not yet
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

withdrawalsScope: institution wide

Protocol functions paused; redemptions reopened later only for allowlisted pre-incident holders; USR fell to as low as 0.03 to 0.27 USD.

Financial impact: About 80M USD unbacked USR minted, about 25M USD extracted (estimates); about 180M USD liquidations on Morpho reported.

Cause, kept in separate layers

What the institution said
Compromised privileged (AWS KMS) minting key used to mint about 80M unbacked USR; collateral pool not directly compromised
DFX classification
Confirmed cyber (cyber: confirmed)
Conflicting reports
Collateral and price figures conflict across sources.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Downstream: Morpho, Fluid lending markets: about 180M USD liquidations and 334M USD outflows (plausible)

Evidence