Resupply #Protocol Drained for $9.5 Million Through Price Manipulation Attack


An attacker has stolen $9.5 million from the Resupply #stablecoin protocol after manipulating cvcrvUSD #token exchange rates.


The hacker artificially inflated the cvcrvUSD price by sending donations, causing the share price to spike dramatically.


Resupply's smart contract used the manipulated price in exchange rate calculations, causing the rate to crash.


The attacker borrowed 10 million reUSD using only one wei of cvcrvUSD as collateral through the borrow function.


PeckShield CEO Xuxian Jiang confirmed that the exploit targeted the cvcrvUSD vault specifically.


The stolen reUSD was later converted to other assets on external markets for profit.


Resupply acknowledged the incident and confirmed the compromised contract has been paused.


The #protocol leverages lending market liquidity and stability for its stablecoin operations.


#DeFi security firm analysis shows the attack centered on wrapped Curve USD staked in Convex Finance.

image
June 26, 2025 at 1:34 PM