CoinInsight360.com logo CoinInsight360.com logo
America's Social Casino

cryptonews 2025-06-26 09:22:59

Stablecoin Protocol Resupply Exploited for $9.5M After Attacker Inflates Token Price

Stablecoin platform Resupply suffered a major exploit worth $9.5 million after an attacker manipulated the price of a key collateral token, security firms reported . Key Takeaways: Resupply lost $9.5 million after an attacker manipulated the price of cvcrvUSD to borrow reUSD cheaply. The exploit exploited faulty price logic in the CurveLend contract used by ResupplyPair. Resupply paused the affected contract and is investigating the breach, with a full post-mortem pending. The attack targeted cvcrvUSD, a wrapped version of Curve USD (crvUSD) staked on Convex Finance. By sending donations to the cvcrvUSD vault, the attacker inflated the token’s share price. This inflated price was then used as collateral to borrow Resupply’s native stablecoin, reUSD, at a highly favorable exchange rate. Resupply Exploit Linked to Manipulated Price Feed in CurveLend Contract The Resupply smart contract involved, ResupplyPair (CurveLend: crvUSD/wstUSR), used the manipulated cvcrvUSD price in its calculations. Once the attacker borrowed the reUSD, the manipulated exchange rate collapsed, triggering a major devaluation of the protocol’s reserves. Analysts at Blocksec noted that the attacker primarily drained funds from the wstUSR market by exploiting the flawed price logic in the borrowing function. The stolen reUSD was then swiftly converted into other crypto assets on external markets. “As a result, the attacker borrowed massive reUSD with just 1 wei of cvcrvUSD as collateral, bypassing the insolvency check,” Blocksec wrote on X. Resupply acknowledged the breach in a statement and confirmed that the compromised contract has been paused. The team is investigating the incident and has not yet confirmed any recovery plans. “A full post-mortem will be shared as soon as a complete analysis of the situation has been conducted,” the team wrote. Resupply will not post any links after this tweet. Links below this tweet that look like Resupply are spam, fake or phishing links. Do not click any link under this tweet. pic.twitter.com/FExOvng40U — Resupply (@ResupplyFi) June 26, 2025 Fuzzland Reveals $2M Insider Exploit on Bedrock’s UniBTC Protocol On Wednesday, Fuzzland disclosed that a $2 million exploit targeting Bedrock’s UniBTC protocol in September 2024 was carried out by a former employee posing as an MEV developer. The attacker used social engineering, inserted malware via a trojanized Rust crate, and maintained undetected access to engineering systems for over three weeks. The breach culminated in the UniBTC protocol being exploited shortly after Fuzzland discussed a security vulnerability. Notably, in the first three months of 2025, the crypto ecosystem lost a whopping $1,635,933,800 across 39 incidents, according to the blockchain security platform Immunefi . Most of that was the result of only two hacks of two centralized exchanges. Phemex suffered a $69.1 million loss in January, while Bybit lost $1.46 billion in February. Subsequently, the total number of losses in the first quarter marks a 4.7x increase compared to Q1 2024 . At that time, hackers and fraudsters stole $348,251,217. Notably, experts assume that the infamous North Korean Lazarus Group is behind the two largest attacks. They stole $1.52 billion, or 94% of total losses. The post Stablecoin Protocol Resupply Exploited for $9.5M After Attacker Inflates Token Price appeared first on Cryptonews .

Leggi la dichiarazione di non responsabilità : Tutti i contenuti forniti nel nostro sito Web, i siti con collegamento ipertestuale, le applicazioni associate, i forum, i blog, gli account dei social media e altre piattaforme ("Sito") sono solo per le vostre informazioni generali, procurati da fonti di terze parti. Non rilasciamo alcuna garanzia di alcun tipo in relazione al nostro contenuto, incluso ma non limitato a accuratezza e aggiornamento. Nessuna parte del contenuto che forniamo costituisce consulenza finanziaria, consulenza legale o qualsiasi altra forma di consulenza intesa per la vostra specifica dipendenza per qualsiasi scopo. Qualsiasi uso o affidamento sui nostri contenuti è esclusivamente a proprio rischio e discrezione. Devi condurre la tua ricerca, rivedere, analizzare e verificare i nostri contenuti prima di fare affidamento su di essi. Il trading è un'attività altamente rischiosa che può portare a perdite importanti, pertanto si prega di consultare il proprio consulente finanziario prima di prendere qualsiasi decisione. Nessun contenuto sul nostro sito è pensato per essere una sollecitazione o un'offerta