Resupply Hack: DeFi Glitch Leads to $9.6M Crypto Theft
Another day, another DeFi breach—infamous hack is now trending after the decentralized protocol Resupply confirmed a critical exploit in its wstUSR market. A flaw in its ResupplyPair contract let a hacker borrow massive amounts of crypto with nearly zero collateral, draining $9.6 million in minutes.
The attacker cleverly manipulated the price of a token called cvcrvUSD. This triggered a logic glitch in the smart contract, making it think the collateral was worth way more than it actually was. Using this trick, they borrowed large amounts of reUSD, swapped it into other tokens like ETH and USDC, and split the stash across multiple wallets.
Rough breakdown of stolen assets:
- ETH: ~$2 million
- USDC: ~$3.6 million
- Others: Remaining amount across stablecoins and tokens
It has paused all activity in the wstUSR market to prevent further damage. Thankfully, other parts of the protocol remain untouched. The team is currently investigating and will publish a full post-mortem soon.
Quick Take:
This hack is a brutal reminder that even well-known DeFi protocols can have fatal flaws—especially when they rely on external price oracles. As the ecosystem scales, the pressure to audit, simulate, and harden these systems is growing fast. For now, Resupply users are left hoping for recovery options—or at least lessons learned.
YOU MIGHT ALSO LIKE: Texas Becomes First U.S. State to Fund a Bitcoin Reserve With $10M Allocation