BMClogo

The Decentralized Finance (DEFI) protocol resupply confirmed a security breach in its WSTUSR market, which resulted in approximately $9.6 million in cryptocurrency losses.

Blockchain security firm Cyvers said Thursday that the vulnerability was triggered by a price manipulation attack involving the protocol’s integration with synthetically stable CVCRVUSD.

Meir Dolev, co-founder and chief technology officer of Cyvers, told Cointelegraph that the attackers exploited price manipulation errors in the supply contract. “By making the stock price go up, they borrowed $10 million in reusd using the smallest collateral,” Dolff said.

Cyers said in the post that the attacker was funded through tornado cash, and the stolen funds were exchanged for Ether (ETH) and separated at two addresses.

source: Cyers

Suspension of attacks affects contract

This event highlights ongoing security issues in the DEFI protocol, especially those involving synthetic assets and mechanisms that rely on Oracle.

Dolev told Cointelegraph that several security measures could block attacks, including proper input verification, Oracle checking and edge testing.

When asked how the protocol can avoid similar hacks, security experts say adding sanity checks to the loan logic and monitoring real-time exceptions may help.

In response to utilization, Resupply issued a statement confirming the incident. The company confirmed that only its WSTUSR market was affected. The Defi Agreement said the affected contracts have been suspended to prevent further damage.

“As soon as the situation is fully analyzed, a complete autopsy will be shared immediately,” the team wrote.

source: replyplyfi

Related: Encrypted atm sting reveals an elderly widow who loses $282K scam

Crypto hacker losses hit $2.1 billion in 2025

With hacker losses reaching billions of dollars this year, the use of price manipulation is in resupply.

On June 4, crypto security company Certik said that hackers and vulnerabilities in 2025 have been stolen by $2.1 billion. Certik also said hackers have begun to shift tactics to social engineering.

Meanwhile, smart contract platform Fuzzland recently revealed that a former employee is responsible for the $2 million bedrock Unibtc vulnerability in 2024.

The platform said insiders also used social engineering strategies, supply chain attacks and advanced persistent threat technologies to steal sensitive data used in exploits.

https://www.youtube.com/watch?v=npzqd7tsqmg

Magazine: Pubkey Bitcoin Bar Will Orange-Pill Washington DC in New York Next