Besides Resolv Hack, This DeFi Vulnerability Type Has Occurred Four Times
Original Title: DeFi Has Seen Resolv's $25M USR Exploit Many Times Before
Original Author: Camila Russo, The Defiant
Original Translation: DeepFlow Tech
On a quiet Sunday morning, someone turned $100,000 into $25 million in about 17 minutes.
The target was the yield-bearing stablecoin protocol Resolv. Before Resolv paused the contract, its USD-pegged stablecoin USR had plummeted to a few cents. As of the time of writing, USR remains severely off-peg, trading around $0.25, with a drop of over 70% this week.
The impact wave goes far beyond Resolv itself. Fluid/Instadapp absorbed over $10 million in bad debt in a single day, experiencing over $300 million in net outflows on the same day, marking its largest daily outflow in history. 15 Morpho vaults were affected. Euler, Venus, Lista DAO, and Inverse Finance all successively paused USR-related markets.

The mechanism that led to the spread of losses from this vulnerability—pricing the off-peg stablecoin at $1 in the lending market—is not a novelty. Over the past 14 months, this situation has occurred at least four times.
How the Exploit Worked
The minting of USR follows a two-step off-chain process: Users deposit USDC through the `requestSwap` function, and a privileged off-chain signing key `SERVICE_ROLE` finalizes the issuance of the USR amount through `completeSwap`.
The contract has a minimum output restriction but no upper limit. Whatever the key holder signs, the contract executes.
The attacker gained access to this key through Resolv's AWS Key Management Service. They submitted two USDC deposits totaling around $100,000 to $200,000 and then utilized the stolen key to mint 80 million USR as a reward. On-chain data shows two transactions of 50 million USR and 30 million USR, both minted within minutes.
「The Resolv USR vulnerability is not a bug - it's a feature working as intended. That's the problem.」 On-chain analyst Vadim (@zacodil) stated.
The SERVICE_ROLE is a regular external account address, not a multisig. The admin key has multisig protection, but the minting key does not.
「Resolv went through 18 audits,」 Vadim said, 「and one of the findings was directly named 'missing cap.'」
The attacker methodically exited: first converting minted USR to wstUSR (a wrapped staking version) to soften the market impact, then swapping it for ETH through Curve, Uniswap, and KyberSwap. The attacker's wallet holds around 11,400 ETH (about $24 million). The system's ETH and BTC collateral pools remain intact amid the stablecoin crash.
How the Contagion Spread
The Resolv vulnerability is actually the overlap of two events. The first being the minting bug and the second the failure of the cascade lending market.
When USR and wstUSR collapsed, every lending market that accepted them as collateral faced the same issue: their oracle still priced wstUSR near $1.
Risk analysis firm Chaos Labs founder Omer Goldberg documented this mechanism. His key finding was: 「The oracle is hardcoded, so it was never repriced. wstUSR was marked at $1.13, while its secondary market trading price was around $0.63.」
Traders bought wstUSR at a low price on the open market, then used the oracle's $1.13 price on Morpho or Fluid to collateralize it and borrowed USDC before exiting.
At Fluid, the team raised short-term loans to cover 100% of the default and pledged to compensate every user in full. At Morpho, co-founder Paul Frambot stated approximately 15 treasuries hold significant exposure, all part of a high-risk, long-tail collateral strategy.
Renowned curator Gauntlet has stated, "Several high-yield vaults have limited exposure."
However, D2 Finance directly refuted this claim, releasing on-chain data showing that Gauntlet's flagship "USDC Core Vault" allocated $4.95 million to the wstUSR/USDC market. Goldberg then stated that Gauntlet's vault holds 98% of the lending-side liquidity in that market.
Responding in writing to The Defiant, Frambot stated, "We've been researching how to present various risks more comprehensively. However, we don't believe the core issue here is a lack of labeling."
Frambot added, "Morpho is oracle agnostic, meaning it allows curators to choose any oracle they deem most suitable for a specific market. Morpho is an open, permissionless infrastructure designed to outsource risk management to curators."
"It is difficult to enforce an objectively 'correct' threshold in all scenarios," Frambot said. "Imposing constraints at the protocol level also carries the risk of hindering the implementation of legitimate strategies."
While the underlying protocol leaves risk management to the curator, some industry insiders believe that curators have not fulfilled their duties.
"I believe there is a flaw in the curator industry's design, as there is no genuine curation taking place," Marc Zeller stated on X.
As of the time of writing, Resolv, Gauntlet, and Fluid have not responded to The Defiant's request for comment.
A Recurring Pattern of Failure
This is not a new type of attack. In January 2025, Usual Protocol's USD0++ was hard-coded to $1 by curator MEV Capital in the Morpho Vault.
Usual then suddenly adjusted the redemption floor to $0.87 without any warning, leaving lenders locked in the MEV Capital Vault, which saw its utilization surge to 100%.
In November 2025, Stream Finance's xUSD collapsed, as the curator had routed USDC deposits into a leverage loop backed by that synthetic stablecoin. When its oracle refused to update, assets worth an estimated $2.85 billion to $7 billion on Morpho, Euler, and Silo faced risk.
In October and November 2025, Moonwell experienced two consecutive oracle failures, resulting in over $5 million in defaults.
-- Price
What Does This Mean for the Curator Model
Morpho's architecture outsources all risk decisions to a third-party "curator," who builds the vault, selects collateral, sets loan-to-value ratios, and chooses oracles. This theoretical framework posits that professional entities possess deeper expertise, competition leads to better risk management, and the protocol is responsible for rule execution.
However, curators rely on generated yields to earn fees, creating an incentive for higher-risk, higher-yield collateral (such as yield-bearing stablecoins). The issue arises when these stablecoins lose their peg, with depositors bearing the brunt of the loss instead of the curator.
In the Resolv incident, some curators' automated bots continued to deposit funds into the affected vault hours after the exploit, exacerbating the loss.
The reason for using hard-coded oracles for yield-bearing stablecoins is to prevent unnecessary liquidations triggered by short-term fluctuations. However, this protection is only effective when the stablecoin remains stable.
Chainalysis, a blockchain analysis firm, stated in a post-mortem analysis that real-time on-chain monitoring capabilities are essential.
"The on-chain smart contract execution worked perfectly fine. The issue clearly stemmed from broader system design and off-chain infrastructure." The analysis firm stated.
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

The Lista DAO has launched the Dow Protocol E-Commerce Financing RWA Vault, with an APY currently reported at 10%

Lista DAO initiates a new proposal: to introduce the LISTA token economic model 2.0 and gradually phase out the veLISTA mechanism

The Lista DAO has updated the progress of the USR event, having repaid a loan of 8.4 million dollars, with risks nearly fully mitigated

Exchanging 200,000 for nearly 100 million, DeFi stablecoins face another attack

RootData: LISTA will unlock tokens worth approximately $3.43 million in one week

CMC20 Index Token Launches on BNB Chain

MEV Capital and Re7 Labs have reached a fund utilization rate of 99% in the Lista DAO platform, triggering a forced liquidation.

Greece ends years of crypto tax uncertainty with new 10% levy on Bitcoin profits

Ethereum software bug triggers emergency fixes across major layer-2 networks

Kraken Owner Invests in Altcoin, Considers Further Purchases. You Should Recognize Him

Stablecoins offer sub-cent payments, Armstrong says, as critics flag risks

Analysis: Stablecoins, Payments, and Prediction Markets Have Become New Growth Points for Crypto Companies, but Profitability Remains Challenged

Nubank Suspends Crypto Withdrawals: What We Know So Far

Buffett's Successor Faces Setback, Google Holdings Show $3 Billion Unrealized Loss

Banking Outage in Japan: 128 Banks 'Frozen' at Once

Beyond APY: Saying Goodbye to Black Box Trust and Reassessing the Security Logic of ETH Staking

Argentine Bitcoiners Debut “The Genesis Of Satoshi Nakamoto” Artwork In Downtown Buenos Aires

Broadcom (AVGO) : AI Growth, Fund Positioning, and Guarantee Risk
Broadcom (AVGO) recently fell with the semiconductor sector, closing down 10.43% at $291.53 on November 5. The shares rebounded more than 4% in premarket trading on November 6. Concerns that election results could lead to tighter AI rules and slower data center approvals contributed to a broad sell-off, with a semiconductor index falling about 12%. The move appears tied mainly to sector sentiment and policy concerns, with no clear company-specific negative catalyst identified.
Institutional trading and AI growth expectations are also in focus. ARK funds sold about $134 million of Broadcom shares over two sessions while adding to SpaceX. Citi maintained its Buy rating and projected that Broadcom’s AI semiconductor revenue could reach $115 billion in fiscal 2027, roughly doubling year over year. Broadcom had approximately $179.2 billion in signed contracts as of the prior quarter, while analysts estimated fourth-quarter AI chip revenue at about $21.7 billion. These forecasts will need to be tested against future results.
Contingent guarantees are another point for investors to monitor. Broadcom is providing guarantees tied to Anthropic’s AI rack-leasing arrangement, involving about $29 billion in the first phase and a second-phase plan of up to $43 billion. Banks plan to issue $21 billion in bonds to support related chip financing. The guarantee amounts are not the same as debt already incurred, but they add a potential risk to assess. Broadcom is scheduled to report its next quarterly results on December 9, when management’s outlook for fiscal 2027 AI demand will be closely watched. This article is for informational purposes only and is not investment advice.

Netflix (NFLX) Stock Rebounds: Insider Sales, Advertising, and Growth Plans
Several Netflix executives sold company shares in early November 2026. Co-CEO Theodore Sarandos sold 27,312 shares from November 3 to 4, valued at about $1.81 million. CFO Spencer Neumann sold shares worth approximately $612,000. Co-CEO Gregory Peters realized about $1.69 million, including transactions related to tax withholding. Chief Legal Officer David Hyman and director Bradford Smith also reduced their holdings. Executive sales can have different reasons and should not be viewed on their own as a measure of the company’s outlook.
After recent pressure, Netflix shares rebounded more than 4% around November 4. Bill Ackman’s Pershing Square Capital Management allocated about 5% of its portfolio to Netflix, while new AI features and positive views on the company’s technology prospects helped sentiment. Netflix reported third-quarter 2026 revenue of $13.44 billion and earnings per share of $0.87, both above expectations, though its forward outlook remains a key focus.
Advertising is one of Netflix’s main challenges. Delays to key ad product features led the company to reduce its annual advertising revenue outlook from $3 billion to $2.7 billion. Viewer engagement has also faced pressure from changes in content appeal and competition from platforms such as YouTube. Netflix is pursuing growth through live events, gaming, and advertising, with plans to expand its ad-supported offering to 15 markets while adjusting its workforce by about 6% to improve margins. Investors may want to monitor advertising growth, engagement, and profitability. This article is for informational purposes only and is not investment advice.

Carvana Earnings: Record Sales, Strong Profit, and Insider Share Sales
Carvana reported third-quarter net revenue of $8.04 billion, up 42.4% year over year and above the $7.7 billion market estimate. Retail units sold reached a record 217,385, an increase of 39.4%. Net income rose to $483 million, while adjusted EBITDA reached a record $800 million, reflecting gains in both revenue and profitability.
Management expects full-year 2026 adjusted EBITDA to reach the upper end of its $2.7 billion to $3.0 billion range. Needham maintained its Buy rating, named Carvana a top pick in transportation technology, and set a $100 price target. Strong results and guidance have drawn investor attention, though continued performance will depend on sales, margins, and operating costs.
Insider transactions are also on investors’ radar. A regulatory filing indicates that CFO Mark Jenkins planned to sell 63,800 shares on November 2, 2026, valued at approximately $4.35 million. Since August, he has planned sales totaling 191,300 shares. An executive share sale alone does not determine a company’s outlook; investors may also consider earnings, cash flow, and future guidance. This article is for informational purposes only and is not investment advice.

FCEL Stock: Data Center Opportunity, Manufacturing Costs, and Lawsuit Risk
FuelCell Energy (ticker: FCEL) provides fuel-cell power solutions. Growing electricity demand from AI data centers could create new business opportunities, while proposed pauses on new data center approvals in some areas have raised concerns about project timelines. A 75-megawatt power project may be affected, and FCEL shares recently fell as much as about 17% in a single session amid policy concerns.
FCEL signed an agreement with Fit Energy to provide up to 380 megawatts of fuel-cell power solutions. Its backlog is approximately $3.6 billion, with about 97% of its sales pipeline related to data centers. The company also drew the second installment under a $49 million financing arrangement backed by an export credit agency, supporting a green energy project and clean-energy exports. Recent leadership changes include Matthew Latino becoming CFO, digital infrastructure executive Peter Hopper joining the board, and John Dansby leading manufacturing scale-up. Converting orders into revenue will depend on production capacity, costs, and project execution.
FCEL reported third-quarter revenue of about $33 million, down approximately 29% year over year, and a net loss of roughly $45.3 million. Product costs and manufacturing overhead for the Fit Energy agreement exceeded the contract pricing, resulting in an approximately $17 million contract impairment charge. Securities class-action allegations concern disclosures about manufacturing capacity and costs; the case remains in the legal process. The deadline to seek appointment as lead plaintiff is November 10, 2026. FCEL’s growth opportunities come with execution, financing, and litigation risks. This article is for informational purposes only and is not investment advice.

Democratic Party's AI Regulation Push Revealed: Plans for Intensive Legislation and Strict Scrutiny of Tech Giants

PFE Stock: Pfizer’s Q3 2026 Earnings, Business Strategy, and Dividend Outlook
PFE is the New York Stock Exchange ticker for Pfizer Inc. In the third quarter of 2026, Pfizer reported revenue of $16.58 billion and adjusted earnings per share of $0.87, both above market expectations. The company raised its full-year revenue outlook to $62 billion–$64 billion and its adjusted EPS guidance to $2.95–$3.05, pointing to stronger performance than previously expected.
Although demand for COVID-related products continues to decline, Pfizer’s non-COVID business is growing. Third-quarter sales reached $720 million for the cancer drug Padcev and $2.52 billion for Eliquis, up 25% year over year. Revenue from newer and acquired products rose 32%. Pfizer is expanding its oncology pipeline, entering the weight-loss treatment market through its acquisition of Metsera, and targeting approximately $9.7 billion in net cost savings by 2029. Cecile Guegan has also taken over as chief financial officer.
Investors are also watching Pfizer’s dividend and legal developments. The company declared a cash dividend of $0.43 per share, with an ex-dividend date of November 6, 2026. Analysts raised some earnings estimates and price targets following the quarterly results. Pfizer also faces ongoing legal scrutiny related to statements about COVID vaccine safety, while its subsidiary Mylan has sued Novo Nordisk over generic-drug patent issues involving Wegovy. Pfizer’s outlook depends on new-product growth, cost savings, patent matters, and litigation developments. This article is for informational purposes only and is not investment advice.

South Korea’s GOPAX halts crypto trading, withdrawals after hacking threat

Bhutan: A royal decree opens the future central bank's reserves in Gelephu to cryptocurrencies

AI Begins to Shake Google's Search Advertising Business Behind $500 Billion Market Value Erosion

What is the real challenge for South Korean exchanges now that the regulatory framework is in place?

What Is TLT? Long-Term Treasury Bonds After the Midterm Election

Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto From 35 Investigations











