Skip to main content
AVOID.NET
Sign in

Resupply

avoid.net/resupply→32/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2JRmbJ…v7vo

Summary

Resupply (resupply.fi / resupply.finance) is a decentralized stablecoin lending protocol built by contributors from Convex Finance and Yearn Finance, succeeding the hacked Prisma Finance protocol after a March 2024 governance vote. The protocol suffered a critical $9.6 million exploit on June 26, 2025, caused by a donation-attack vulnerability in a newly deployed ERC-4626 vault, with stolen funds laundered through Tornado Cash. The team's post-exploit governance response generated significant community controversy, including alleged silencing of critics and a disputed insurance-pool burn proposal, before the bad debt was eventually fully repaid in August 2025.

Connected Entities

6 entities · 60 linked investigations
Organizations
□Resupply
Protocols
⌂ResupplyFi27⌂Uniswap58⌂Convex Finance⌂Curve Finance⌂Yearn Finance
Relationships
  • ResupplyFi→mentioned with→Resupply(80%)
  • Convex Finance→mentioned with→Curve Finance(80%)
  • Resupply→mentioned with→Yearn Finance(80%)
  • Resupply→mentioned with→Convex Finance(80%)
  • ResupplyFi→mentioned with→Convex Finance(80%)
  • ResupplyFi→mentioned with→Yearn Finance(80%)
  • Resupply→mentioned with→Curve Finance(80%)
  • Yearn Finance→mentioned with→Curve Finance(80%)
  • Resupply→mentioned with→Uniswap(60%)
  • Resupply→mentioned with→ResupplyFi(60%)
Also appears in
PrismaFi·12Lendf.me·30OpenZeppelin AI Exploit Threat Vector·15Nexera·32Goliath Ventures / Christopher Delgado·0Aerodrome Finance·58Makina Finance·24Bunni Protocol·28Rain Protocol (RAIN Token)·12Cork Protocol·22+ 50 more

Connected Through

6 shared actors · 260 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Resupply?

Timeline(12 events)

28 March 2024

Prisma Finance (Resupply predecessor) exploited for $11.6 million via MigrateTroveZap contract vulnerability; TVL collapses from $220M to $107M.

December 2024

Governance proposal PIP-46 passes, shutting down Prisma Finance and introducing Resupply as successor protocol built on FraxLend codebase by Convex and Yearn contributors.

7 January 2025

Convex Finance officially announces Resupply on X, describing it as a new stablecoin protocol developed jointly by Convex and Yearn.

17 May 2025

Resupply deploys a new LlamaLend Market via Curve's factory.

31 May 2025

Governance proposal for the new market is published and subsequently passes on-chain.

26 June 2025

At 00:18 UTC, crcrvUSD Market 0x6e90 is deployed. At 01:53 UTC (approximately 95 minutes later), attacker executes donation attack using a $4,000 flash loan, draining approximately $9.6 million in reUSD. At 02:53 UTC, protocol pauses the affected market.

26 June 2025

reUSD depegs to approximately $0.98; protocol TVL drops from ~$135M to ~$85M. Resupply confirms breach via X and promises a post-mortem.

27 June 2025

Attacker routes stolen funds through Tornado Cash. Controversy erupts over team's three-sentence public response. OneKey founder Yishi Wang publicly criticizes the governance response and discloses $2M+ personal losses.

27 June 2025

Curve founder Michael Egorov allegedly threatens legal action against Yishi Wang over public criticism. Community backlash intensifies.

30 June 2025

Resupply publishes formal recovery plan: $2.86M treasury repayment already made; proposes 6M reUSD insurance pool burn; 1.13M reUSD to be repaid via future revenue; 2.5M RSUP tokens offered as retention incentive.

August 2025

Resupply announces full repayment of all $10 million in bad debt from the June 2025 exploit, using treasury funds, insurance pool, and Convex/Yearn sub-DAO support.

12 August 2025

PeckShield confirms attacker transferred 2,280 ETH (approximately $9.8M) through Tornado Cash, completing money laundering of stolen proceeds.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain25 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 25 of 30 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:22 AM

last updated: 8/30/2026, 7:44:38 AM

4 views

avoid.net — verified advice for a post-truth world