USR — minting exploit collapse
USR•
eth CriticalMinting exploit via compromised SERVICE_ROLE EOA: ~$80M USR minted from ~$200K collateral (400x) using unvalidated requestSwap/completeSwap functions. USR collapsed to $0.025 on Curve within 17 min; aggregated reference low $0.055. Attacker extracted ~$23.8M (converted to ETH). Secondary wave: Morpho vaults used hardcoded $1 oracle — traders borrowed USDC against depegged USR before oracle updated. Fluid, Euler, Venus, Lista DAO all paused. Webacy Depeg Monitor flagged Critical in ≤20 min across ETH, Base, ARB, BSC. Vault risk system had pre-flagged USR vaults with elevated depeg and asset risk scores pre-incident. As of 2026-03-25, USR remains ~69% below peg (~$0.31). Peg has not recovered. All four chains (ETH, Base, ARB, BSC) remain at Critical. Exit Recommended flags are active on all USR-backed vaults.
2026-03-22 → ongoing