Re7 and Resolv have finalized an agreement outlining a remediation framework in connection with the USR incident.
Additional details regarding the process will be announced over the coming days.
The recovery portal is open for Stage 2
Eligible categories:
• USR/wstUSR acquired post-incident
1 USR : 0.5 USDC
• LP positions (post-incident portion)
1 USR : 0.5 USDC + RESOLV allocation bringing total recovery to 95% at reference RESOLV price
• RLP holders (not leveraged)
1 RLP : 0.71 USDC + 2.71 RESOLV per RLP (60%+ total recovery at reference RESOLV price)
→ https://t.co/baGtUPNLJF
Recovery portal is open till August 26, 2026.
Eligibility for Stage 2 is determined by the snapshot taken on June 3, 23:59 UTC.
KYC is required for any recovery asset in any stage where the claimable amount exceeds 10,000 USDC. Allocations of $RESOLV exceeding 10,000 tokens will vest over 24 months, with monthly linear unlocks beginning on June 27, 2026, through the vesting app.
Presenting Vault Street in New York.
Keen to ideate on onchain yield generation, RWAs and risk curation — reach out to set up a meeting with Fedor or Danyal on site.
Important Snapshot Notice
On June 3, 23:59 UTC, a snapshot of all post-hack USR positions and RLP will be taken to enable Stage 2 recovery through the Resolv recovery portal.
This snapshot will determine compensation for affected positions, including both the cash recovery and RESOLV token allocation.
Stage 2 recovery will launch separately — details to follow.
Gauntlet and Resolv have reached an agreement regarding a remediation path related to the USR exploit.
Wallets with positions in the Gauntlet-curated vaults affected by the incident are able to claim available recovery proceeds totaling 4,379,827 USDC through the @merkl_xyz onchain distribution infrastructure.
For the v1 Morpho vault Gauntlet USDC Core on Mainnet, and for illiquid v1.1 Morpho vaults (Resolv USDC on Mainnet and Extrafi XLend USDC on Base), claims are available immediately.
Due to the nature of v1.1 vaults, since Gauntlet USDC Frontier on Mainnet and Seamless USDC on Base vaults have liquidity that can be withdrawn, the claim will become available for these vaults when they become illiquid.
Snapshots used for claims within Merkl have been taken accordingly, at time of impact markets removal for v1 vaults, and at time of illiquidity for v1.1 vaults.
Eligible users will need to authenticate their wallets on the official Merkl app to see their potential claims: https://t.co/T9cyaPzAoZ
In the next 24 hours, there are expected movements of funds across wallets associated with @ResolvLabs and Resolv Foundation.
These operational transfers are conducted as a part of preparations for upcoming recovery processes and additional security/infrastructure measures (including planned wallet rotation).
Challenges happen in DeFi - what matters is how teams respond.
We've seen examples in the past when protocols fully recover after the major incidents, and I wish Resolv would be one of these examples.
Over the past weeks, Resolv has been actively working with affected counterparties and ecosystem participants to move the recovery process forward across both pre-incident and post-incident user groups.
As part of this process, we have reached a shared understanding with @0xfluid on the path forward, as one of the key counterparties impacted by the post-incident dynamics. This reflects constructive dialogue and close coordination between the teams throughout the process.
The agreed framework differentiates between pre-incident and post-incident exposures:
- pre-incident positions with positive equity are expected to be made whole by Resolv
- bad debt on positions created after the incident will be shared equally between Resolv and Fluid
The settlement execution will be completed on May 11.
Aligning with Fluid as the major affected protocol marks an important milestone as we continue discussions with other counterparties and protocols across the ecosystem. Conversations are ongoing and progressing well, and we remain focused on finalizing the broader recovery framework and further updates.
Resolv Foundation Q1 2026 Report is out.
Q1 was a challenging period for Resolv. Since late March, main focus has been on recovery and ensuring long-term sustainability.
Foundation is committed to supporting the token as part of the broader system going forward:
• the core functionality of RESOLV token remains unchanged post-relaunch;
• we are actively working with major exchanges to support RESOLV continued availability and market stability.
Recently, we received an interim report from @Mandiant, who have been conducting an independent forensic investigation since late March.
Mandiant has been able to confirm previously published Resolv postmortem, including the attack chain, timeline, and the steps taken by the bad actor. Nothing in their review to date contradicts what has been disclosed publicly.
We and our advisors are continuing work on threat actor identification. In parallel, @zeroshadow_io is supporting active onchain and offchain tracing, alongside coordination with law enforcement across multiple jurisdictions.
Resolv team remains fully operational, with daily coordination across all related workstreams. All is being done with a goal of maximizing recovery for our users and the ecosystem.
I believe in Resolv and the team more than ever. Hacks happen, and that’s very unfortunate, they’re becoming more sophisticated, and OpSec is no longer just a nice-to-have. They’re working really hard, and I have no doubt that they will recover.
Long live Resolv!
It might be tempting to describe this incident as simply a “compromised private key.” However, in this case the attack path appears more complex and involves multiple stages prior to the on-chain actions.
The attack vector itself is not fundamentally new, but its execution does not appear trivial and involves a sequence of steps that collectively led to the exploit.
As the ecosystem evolves — particularly with the growing role of automation and AI-assisted workflows — similar attack patterns may become more common. It’s important to look at such incidents more holistically rather than relying on simplified explanations.
@ResolvLabs has demonstrated strong capability and professionalism. We look forward to seeing the team recover and continue their work successfully.
Ivan, co-founder of Resolv, has shared an update on the protocol security incident and recovery process.
Some of the questions covered:
→ Why were whitelisted USR users redeemed first?
Verified wallets allowed the team to act within 24 hours manually to limit further impact on the broader market. 98% of those redemptions are complete.
→ What can non-whitelisted pre-exploit USR holders expect?
The same 1:1 commitment. The team is finalising the technical solution for redemptions.
→ Was this an insider incident?
The investigation with @Mandiant and @zeroshadow_io is ongoing. No evidence of insider involvement has been found at this stage.
→ What about post-exploit USR holders, LPs and RLP holders?
The remaining steps involve legal, technical, and ecosystem coordination across many counterparties. There is no single obvious solution — only a set of trade-offs. The goal is to find the most balanced outcome.
→ How long will the full recovery plan take?
We are moving as quickly as the process responsibly allows.
Watch the full video below:
Update on the USR incident:
Previously Lista DAO had $8.6M in total USR-related loans.
To date, $8.4M has been fully repaid. Every position was redeemed 1:1 at full USD value.
Zero loss for users. Zero loss for the protocol.
Currently only one position remains with $26K in debt. If this is your position, please reach out to @lista_dao or @ResolvLabs to complete repayment and close it.
We’ve been working with @ResolvLabs for a long time, and the team has always struck us as extremely capable and professional.
Incidents happen; we hope the protocol comes back stronger than ever.
As the mitigation process continues, we want to provide clarity on an important point. We strongly advise against trading or acquiring USR at this time.
Onchain data indicates that illicitly minted USR has mixed with pre-hack USR across many wallets and continues to change hands on secondary markets.
USR created illicitly by the exploiter was never backed by collateral and carries no redemption rights. Any transactions at this time carry a risk of involving illicit tokens and add complexity to the recovery process.
We are in the early stages of evaluating recovery options for affected holders and cannot make guarantees, but any relief that may ultimately be available could be limited by continued trading activity.
We are working closely with affected protocols to develop a resolution plan and will share details when ready.