A single price manipulation bug let attackers drain Resupply’s crypto reserves—exposing deeper flaws in DeFi security.
Resupply, a decentralized finance (DeFi) protocol, suffered a $9.6 million crypto loss after a hacker exploited a price manipulation bug in its wstUSR market using a synthetic stablecoin, cvcrvUSD. The attacker, funded via Tornado Cash, inflated share prices to borrow $10 million with minimal collateral before laundering the funds into Ether across two addresses. The breach highlights ongoing DeFi vulnerabilities, especially around synthetic assets and oracle dependencies. Resupply paused affected contracts and promised a full post-mortem, while the wider crypto sector faces $2.1 billion in hack losses for 2025, with attackers increasingly shifting to social engineering tactics.
–
Crypto hacks are becoming an everyday thing. Traders and investors only care about security after they get hacked. Don’t be one of them. Protect your digital assets at all costs! Use the most secure crypto wallet.

