Back

Resolv Foundation Unveils Recovery Plan for USR Security Incident

Severity: Medium (Score: 51.1)

Sources: Bitget, Panewslab

Published: 2026-05-27 · Updated: 2026-05-28

Keywords: resolv, foundation, recovery, security, incident, announced, plan

Severity indicators: pla

Summary

On March 22, 2026, the Resolv Foundation faced a security incident involving illegally minted USR tokens, which led to the suspension of operations. The foundation has now announced a recovery plan that differentiates between user categories, including direct holders of USR/wstUSR, LP positions, and RLP holders. Users holding USR/wstUSR before the incident will receive a 1:1 exchange for USDC, while those who acquired it afterward will receive a 1:0.5 ratio. The RLP reference price has been adjusted to 55% of its last pre-incident value, allowing 1 RLP to be exchanged for 0.71 USDC and 2.71 RESOLV tokens. A total of 10% of the RESOLV token supply will be allocated for recovery, with 70% directed to affected RLP holders. Recovery payments can be claimed from May 26 to August 26, 2026. Additionally, Resolv has launched a new business line, Vault Street, which will focus on tokenized real-world assets, with its first product, primeUSD, set to launch publicly in June. Key Points: • USR tokens were illegally minted, prompting a protocol suspension. • Recovery plan includes differentiated compensation for various user categories. • Claim period for recovery payments runs from May 26 to August 26, 2026.

Detailed Analysis

**Impact** The incident affected holders of USR and wstUSR tokens, liquidity provider (LP) positions, lending market users, RLP holders, USR Yield Maxi vault participants, Pendle positions, and other structured product investors. Illegally minted USR tokens entered the market, forcing the protocol to suspend operations and enter recovery mode. The recovery plan involves exchanging pre-incident USR/wstUSR at a 1:1 ratio for USDC and post-incident tokens at a 1:0.5 ratio, with RLP reference prices reset to 55% of pre-incident values. The Resolv Foundation allocated 10% of its total RESOLV token supply for recovery, with 70% of that distributed to affected RLP holders. Eligible users can claim recovery payments from May 26 to August 26. **Technical Details** The attack resulted in the unauthorized minting of USR tokens on March 22, leading to market disruption and protocol suspension. The articles do not specify the attack vector, TTPs, exploited vulnerabilities, malware, or infrastructure details. No CVEs or IOCs are mentioned. The incident corresponds to the exploitation and impact stages of the kill chain, culminating in financial asset compromise and operational shutdown. **Recommended Response** No specific technical mitigations or patches are provided in the articles. Defenders should monitor for unauthorized token minting activities and suspicious transactions involving USR, wstUSR, and RLP tokens. Users and administrators should verify token holdings against the announced recovery plan and ensure claims are submitted within the designated window. Vigilance on new token launches, such as Vault Street’s primeUSD, is advised to detect potential related threats.

Source articles (2)

  • Resolv Foundation announces recovery plan for the March USR security incident — Bitget · 2026-05-27
    ChainCatcher news: The Resolv Foundation has announced a comprehensive recovery plan regarding the March 22 USR security incident. This event resulted in illegally minted USR tokens entering the marke…
  • The Resolv Foundation has announced a recovery plan in response to the USR security ... — Panewslab · 2026-05-27
    PANews reported on May 27th that the Resolv Foundation announced a comprehensive recovery path for the USR security incident on March 22nd . This incident resulted in illegally minted USR tokens enter…

Timeline

  • 2026-03-22 — USR security incident occurs: Illegally minted USR tokens enter the market, leading to the suspension of protocol operations.
  • 2026-05-26 — Recovery payments claim period opens: Affected users can begin claiming recovery payments as part of the Resolv Foundation's recovery plan.
  • 2026-06-01 — Launch of primeUSD product: Resolv Foundation's new product, primeUSD, focusing on tokenized real-world assets, is expected to launch publicly.

Related entities

  • Resolv Foundation (Company)
Loading threat details...

Threat Not Found

The threat cluster you're looking for doesn't exist or has been removed.

Return to Feed