Resolv Labs lost $25 million on March 23, 2026 after a compromised private key granted an attacker unrestricted minting access to USR, the protocol's dollar-pegged stablecoin. With no oracle check or mint cap, the attacker deposited 100,000 USDC and received 50 million USR in return — 500 times the expected amount. USR crashed 97.5% within 17 minutes on Curve. Post-mortem: https://rekt.news/resolv-labs-rekt