Resolv Labs was allegedly compromised by someone who got their hands on private AWS keys.
Over the weekend, crypto protocol Resolv, which issues the USR stablecoin, was exploited by an attacker who was able to mint nearly 80 million new USR tokens out of thin air after only putting down a few hundred thousand dollars’ worth of collateral.
, the attacker was able to pull off the exploit after gaining access to a private key associated with the centralized backend control for minting new tokens in the protocol.Earlier today, a malicious actor gained unauthorized access to Resolv infrastructure through compromised private key, resulting in the minting of approximately $80M of…According to reports tracking the on-chain movements of funds associated with the attacks, clawing back all of the funds seems impractical, as nearly $25 million has already been converted into ether, the native cryptocurrency of the Ethereum network. Unlike stablecoins, ether is crypto native and not centrally controlled, which means there is no third-party institution to contact in an effort to reverse transactions or seize the assets.indicates the token was trading below $0.25 Monday morning following the issuance of tens of millions of unbacked USR tokens.While this sort of exploit immediately brings to mind the collapse of the algorithmic stablecoin UST associated with the Terra blockchain in the spring of 2022,, it does not appear that the financial engineering or smart contracts associated with Resolv were the key problem in this case. Instead,“The attacker compromised Resolv’s cloud infrastructure to gain access to Resolv’s AWS Key Management Service environment where the protocol’s privileged signing key was stored,” reads the Chainalysis report. “With control over the KMS environment, the attacker could use Resolv’s own minting key to authorize any minting operation they chose.” While the exposed private key was the main source of the trouble, it’s also true that the smart contract in control of minting new USR tokens did not have any sort of maximum issuance check hard-coded into it. Such a safeguard could have potentially limited the damage, asWhile decentralization is often at the core of the supposed value proposition offered by crypto and blockchain-based infrastructure, this latest incident is yet another example of that decentralization being exposed as more marketing theater than reality. It’s noteworthy that AWS-based infrastructure was involved in this exploit, as much of the crypto world’s financial infrastructure experienced downtime last yearOf course, stablecoins themselves also operate as centralized tokens backed by assets held by traditional financial institutions, adding another layer of centralization to the mix. Due to their centralized and controllable nature,deployed their own stablecoin-native blockchainsMicrosoft Office Suite and Windows 11 Pro Bundle Is Now 90% Off With March Madness Savings, One-Time Fee for a Lifetime LicenseThis Samsung 49-Inch Odyssey OLED Gaming Monitor Is $500 Off and Comes With a Free Copy of Resident Evil: RequiemSamsung Bespoke AI Refrigerator Wants to Take the Stress Out of the Kitchen“The Genius Act is being threatened and undermined by the Banks, and that is unacceptable — We are not going to allow it,” the president wrote.Remember Meta's Libra Project, later renamed"Diem?" Well now Meta appears to be moving ahead with a stablecoin that is neither of those.It Turns Out Crypto’s Stablecoin Adoption is Around 1% of Previous Estimates
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
US Dollar-Based Stablecoin USR Crashes Amid Critical ExploitA popular stablecoin has taken an enormous hit as a logic flaw got severely abused by an attacker.
Read more »
Resolv Labs’ stablecoin depegs as attacker mints millions of tokensThe most recent news about crypto industry at Cointelegraph. Latest news about bitcoin, ethereum, blockchain, mining, cryptocurrency prices and more
Read more »
The SEC explains how it's viewing a crypto security: State of CryptoJoint SEC-CFTC interpretive guidance outlines how the agencies will determine whether a cryptocurrency is a security.
Read more »
South Korea crypto liquidity tumbles as stablecoin balances plunge 55% and stock heat upOn-chain data shows a sharp drawdown in dollar-linked token holdings since July, with the latest wave triggered by won weakness.
Read more »
Resolv stablecoin crashes 70% as attacker extracts $25 million in ETHThe protocol holds $95 million in assets against $173 million in liabilities, leaving it functionally insolvent. USR is trading at $0.27, down 72% in a week.
Read more »
Crypto market rattled by $400 million liquidations as bitcoin dips to $68,000: Crypto Markets TodayBTC slips back into February range after Trump’s Iran warning sparks selloff, wiping out leveraged longs and shifting flows toward commodities.
Read more »