Resupply
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 32 to 27. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·2JRmbJ…v7voSummary
Resupply (also known as ResupplyFi) is a stablecoin lending protocol built by Convex Finance and Yearn Finance contributors as the successor to Prisma Finance, which was exploited for $11.6 million in 2024. In June 2025 an ERC-4626 donation attack on a newly deployed vault stole an estimated $9.3–9.8 million, laundered through Tornado Cash, and the team's response drew criticism. The resulting $10 million of reUSD bad debt was reported fully repaid by August 2025 through an insurance pool burn, treasury and developer contributions, and a Yearn loan.
Connected Entities
6 entities · 60 linked investigations- ResupplyFi→mentioned with→Resupply(80%)
- Convex Finance→mentioned with→Curve Finance(80%)
- Resupply→mentioned with→Yearn Finance(80%)
- Resupply→mentioned with→Convex Finance(80%)
- ResupplyFi→mentioned with→Convex Finance(80%)
- ResupplyFi→mentioned with→Yearn Finance(80%)
- Resupply→mentioned with→Curve Finance(80%)
- Yearn Finance→mentioned with→Curve Finance(80%)
- Resupply→mentioned with→Uniswap(60%)
- Resupply→mentioned with→ResupplyFi(60%)
Connected Through
5 shared actors · 238 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ⌂Uniswapprotocol
- ⌂Curve Financeprotocol
- ⌂Yearn Financeprotocol
- ⌂Convex Financeprotocol
Timeline(19 events)
March 2024
Prisma Finance, Resupply's predecessor, is exploited for $11.6 million via its MigrateTroveZap contract; TVL falls from about $220M to $107M.
Prisma Finance exploit March 28, 2024 — ImmunebytesDecember 2024
Prisma governance proposal PIP-46 passes, shutting down Prisma Finance and introducing Resupply, built on the FraxLend codebase by Convex and Yearn contributors.
PIP-46: Shutdown Prisma Finance, introduce Resupply — Prisma governance forumDecember 2024
Resupply publicly introduced by Convex Finance and Yearn Finance.
Convex Finance on X — Resupply introducedJanuary 2025
Convex Finance announces Resupply on X as a new stablecoin protocol developed jointly with Yearn.
Convex Finance on X — Resupply announcementFebruary 2025
Security reviews by ChainSecurity and yAudit (Electi) completed about three to four months before the exploit, covering the ResupplyPair code but not deployment initialization.
ResupplyFi Rekt — Rekt NewsMarch 2025
Resupply officially launches on mainnet, supporting Curve Lend and Fraxlend collateral for borrowing reUSD.
Convex Finance on X — Resupply launchMay 2025
Resupply deploys a new LlamaLend market via Curve's factory.
May 2025
Governance proposal for the new market is published and later passes on-chain.
June 2025
New crvUSD-wstUSR vault deployed; roughly 95 minutes to two hours later an attacker uses a $4,000 flash loan in an ERC-4626 donation attack to borrow 10 million reUSD against 1 wei of collateral, stealing about $9.3–9.8 million. Exploit tx 0xffbbd492e0605a8bb6d490c3cd879e87ff60862b0684160d08fd5711e7a872d3.
ResupplyFi Hack Analysis — Ackee BlockchainJune 2025
Resupply pauses the affected wstUSR market and confirms only that market is impacted.
DeFi stablecoin lending protocol Resupply hit with $9.3m exploit — DL NewsJune 2025
reUSD depegs to about $0.98 and TVL drops from about $135M to $78–85M.
DeFi stablecoin lending protocol Resupply hit with $9.3m exploit — DL NewsJune 2025
Attacker deposits about 1,607 ETH (roughly $6.5M) into Tornado Cash.
The Resupply attacker has deposited 1,607 ETH into Tornado Cash — PANewsJune 2025
C2tP, a Convex developer, commits $1.4 million of personal funds to cover user losses; Convex contributes $810,000 from its treasury.
Resupply developer donates $1.4m after protocol suffers $9m exploit — DL NewsJune 2025
Criticism grows over the team's three-sentence public response; OneKey founder Yishi Wang criticizes the governance response and discloses over $2M in personal losses.
Post-hack silence, governance failure: deconstructing Resupply's $9.6M — Crypto Labs (Medium)June 2025
Curve founder Michael Egorov allegedly threatens legal action against Yishi Wang over his public criticism.
AICoin article on the Resupply governance controversyJune 2025
Resupply publishes its recovery proposal: burn 6M reUSD from the insurance pool, repay 1.13M reUSD through future revenue and a Yearn loan, offer 2.5M RSUP as a retention incentive, and hold a shortened three-day vote.
Stablecoin protocol Resupply proposes burning 6 million tokens after $10 million exploit — The BlockJuly 2025
Governance vote on the recovery plan concludes; the insurance pool burn and withdrawal cooldown proceed after approval.
Resupply protocol outlines recovery plan post $10M exploit, proposes $6M token burn — crypto.newsAugust 2025
Resupply announces full repayment of the $10 million bad debt, using the insurance pool burn, treasury and developer contributions, and a Yearn loan.
Resupply fully repays $10 million bad debt from June 2025 exploit — AInvestAugust 2025
PeckShield-reported laundering of 2,280 ETH (about $9.8M) through Tornado Cash is reported.
ResupplyFi Exploiter Launders $9.8 Million in Stolen ETH Via Tornado CashDecision Log
- slot 462182883 · hash BrwY92XK8EddixdPW8hpbc71ZmUPanaFtghZX3EWU6Fq
- slot 462182877 · hash DRvCMQBzjFSuup7kmSdznzhMb5XWjGf2igC1XgWvLtEV
- slot 422413716 · hash AeQKu7hPY6jDcC9Ju1mcPUzFpYG7LCGrFhCTs8WCpvZB
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 32 of 40 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 5/4/2026, 2:54:22 AM
last updated: 10/27/2026, 7:06:20 PM
4 viewsavoid.net — verified advice for a post-truth world