According to PANews, Resupply has released an analysis report on a recent hacking incident, revealing that an attack on the crvUSD-wstUSR trading pair resulted in approximately $10 million in reUSD bad debt. The vulnerability was specific to this token pair, and other trading pairs remain unaffected, with Resupply markets continuing normal operations.
The debt limit for the affected token pair has been set to zero, and withdrawals from the insurance pool have been suspended. A formal governance vote is required to lift the suspension. Resupply highlighted that the problematic code segment had undergone multiple security audits and independent researchers were hired to review the codebase, yet the issue was not reported. The stolen funds are still on-chain, and Resupply is monitoring the situation closely, ready to take necessary actions.