KyberSwap Takes Action After $80 Million Gone Wrong: What You Need to Know!

by

Key Highlights

  • In a move that can only be described as a digital bouncer at a club, Kyber Network blocked every wallet that smelled like it was linked to the USR stablecoin exploit. They did this to prevent any more shady transactions on KyberSwap, ensuring that the crypto party didn’t turn into a dumpster fire.
  • Somehow, a villain managed to turn a measly $100,000-$200,000 in USDC into a staggering 80 million unbacked USR tokens (that’s like inflating your ego by 400-500 times) by exploiting some glaringly obvious flaws in the requestSwap/completeSwap functions. Who needs a magic wand when you have coding skills?
  • Resolv, realizing they might have accidentally thrown a rager without hiring security, immediately paused operations. They’re prepping for allowlisted redemptions starting March 23, 2026. Meanwhile, USR crashed harder than my hopes of being rich from crypto, plummeting from $1 to a pitiful $0.025 before making a half-hearted comeback to around $0.40-$0.80. Lending protocols like Morpho and Fluid were like, “No thanks,” just disabling USR collateral to contain the chaos.

In an impressive display of speed that would make even a cheetah jealous, Kyber Network swiftly blocked all wallets linked to the attacker on its KyberSwap platform. It was like an emergency lockdown at a high school after someone pulled the fire alarm-just pure chaos.

Monday morning brought a delightful update from the Kyber team, who confirmed they had identified the exploit-linked addresses faster than you can say “I should have seen that coming.” “All wallets linked to the exploit were promptly identified and blocked from further activity on the platform,” they announced on X. They also promised ongoing monitoring, which sounds suspiciously like a parent promising to check in on their teenager’s late-night shenanigans.

Following the recent USR incident reported by Resolv Labs, we’d like to update users on the immediate action taken by KyberSwap yesterday: All wallets linked to the exploit were promptly identified and blocked from further activity on the platform.

We will continue to monitor…

– Kyber Network (@KyberNetwork) March 23, 2026

The attacker apparently went on a shopping spree with the stolen funds, routing them through various decentralized exchanges like KyberSwap, because why not add some extra spice to an already chaotic situation?

On-chain traces showed the exploiter swapping minted USR tokens for stablecoins and ETH across platforms like Curve, Uniswap, and others, leaving behind a trail of confusion and panic. It’s like watching someone try to clean up glitter after a party-good luck with that!

The exploit: How $100K turned Into millions

The breach hit Resolv Labs on March 22, when the attacker decided to play “who can exploit the most vulnerabilities” and turned $100,000 to $200,000 in USDC into 80 million unbacked USR tokens. Talk about a glow-up! It’s like turning your lunch money into a luxury yacht.

Security researchers, including the ever-vigilant PeckShield and Cyvers, pointed out that a compromised SERVICE_ROLE private key (which is basically like giving the keys to the kingdom to the pizza delivery guy) combined with absent on-chain validations allowed for this wild inflation. Don’t worry; the underlying collateral pool is still intact at around $141 million-at least someone came out of this mess unscathed.

.@ResolvLabs It seems multiple large amounts of $USR have been minted. Stay alert!

$50m:
$30m:

– PeckShieldAlert (@PeckShieldAlert) March 22, 2026

The attacker dumped those tokens faster than I can inhale a slice of pizza, crashing USR from its $1 peg to a cringe-worthy $0.025 in some Curve pools. There was a partial recovery later, but let’s be real-this stablecoin is about as stable as my emotional state during tax season.

The total stolen amount? A casual $23 million to $25 million, mostly converted to ETH after swaps, with funds moved around like they were playing hot potato.

Broader DeFi impact and protocol responses

In response to this wild night out, Resolv hit the pause button on everything to stop further minting. They’re working on recovery steps that include token burns (some of the attacker’s USR already made an unscheduled trip to the digital bonfire) and planned redemptions for legitimate holders. No one gets left behind-even in a disaster!

This notice is issued on behalf of Resolv Digital Assets Ltd. in relation to the Resolv protocol.

Earlier today, a malicious actor gained unauthorized access to Resolv infrastructure through compromised private key, resulting in the minting of approximately $80M of…

– Resolv Labs (@ResolvLabs) March 22, 2026

As part of their recovery process, Resolv announced they’d enable redemptions for all pre-incident USR, starting with allowlisted users. Sounds like a VIP treatment, doesn’t it? “The current target start date is March 23, 2026,” they promised, as if we all could just forget this messy ordeal.

Other DeFi projects were quick to distance themselves, kind of like exes after a bad breakup. Meanwhile, protocols like Morpho and Fluid saw their fair share of bad debt or forced exits after accepting USR as collateral. Some vaults disabled USR altogether while others scrambled to find emergency coverage. It’s like watching a game of musical chairs where everyone suddenly realizes there are no chairs left.

This incident has reignited the age-old debate about hybrid off-chain/on-chain designs in stablecoin issuance. You know, the ones where a single point of failure can send the whole system into a tailspin. It’s like trusting a squirrel with your car keys-not a great idea!

As of March 23, USR trades are as stable as a toddler on a sugar high, and the attacker continues to move funds like they’re playing a game of digital whack-a-mole. KyberSwap’s quick block may have saved them from more platform-level damage, but this event is yet another reminder that DeFi’s permissionless infrastructure is like a Wild West shootout-exciting, but oh-so-dangerous!

Read More

2026-03-23 10:12