Resupply Hit by Price Hack That Drained $9.6M in Crypto

Crypto News Exploits

Resupply Hit by Price Hack That Drained $9.6 Million in Crypto

Written by Aaron S.,

Editor-In-Chief

Last Updated: June 26, 2025

Key Takeaways

Resupply lost $9.6 million after attackers manipulated prices in its wstUSR market using the synthetic stablecoin cvcrvUSD;
The exploit was traced by the blockchain security firm Cyvers to a flaw in how the protocol calculated value;
Resupply paused the affected contract and confirmed only one market was hit, and a full investigation is still underway.

Stop overpaying - start transferring money with Ogvio. Sign up, invite friends & grab Rewards now! 🎁

Resupply Hit by Price Hack That Drained $9.6 Million in Crypto

BITDEGREE IN YOUR SOCIAL FEED

Resupply, a decentralized finance (DeFi) platform, has confirmed a breach in one of its markets, which resulted in the loss of around $9.6 million worth of crypto assets.

The issue was linked to its wstUSR pool, where attackers used price manipulation involving a synthetic stablecoin known as cvcrvUSD.

Cyvers, a blockchain security firm, reported on June 26 that the attack exploited a flaw in the protocol's calculation of value.

What is Litecoin? LTC Easily Explained (ANIMATED)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

According to Cyvers, the funds used in the attack were first routed through Tornado Cash, a service often used to hide transaction history.

After gaining access to the assets, the attacker converted them into Ethereum ETH $3,189.00 and split them between two separate addresses. This method is used to make tracking the funds more difficult.

In response, Resupply confirmed that the problem was limited to the wstUSR market. The team shared in a June 26 post on X:

Resupply has experienced an exploit in the wstUSR market. The affected contract has been identified and paused. Only the wstUSR market was impacted and the protocol continues to function as intended.

They added, "A full post-mortem will be shared as soon as a complete analysis of the situation has been conducted".

Recently, Fuzzland, a smart contract platform, confirmed that a $2 million UniBTC exploit in 2024 was carried out by a former employee. But how did it happen? Read the full story.