Resolv Offers Deal After Exploit: Attacker Can Keep $2.5M If 90% of Funds Are Returned

Resolv Labs said it has sent an on-chain message to the attacker's address following a vulnerability exploit that enabled the uncollateralized minting of about 80 million USR. The team proposed a settlement under which the attacker must return 90% of the converted proceeds—roughly $25 million in ETH—to a designated recovery address, while retaining the remaining 10% as an incentive. Resolv also要求 the attacker halt any further activity involving the stolen funds and transfer all USR under their control to the same recovery address. The terms must be met within 72 hours of the announcement. Resolv said that if the attacker does not comply, it will escalate efforts, including working with centralized exchanges, cross-chain bridges and infrastructure providers to freeze related assets; publishing the attacker's address and transaction trail; coordinating with blockchain analytics firms and law enforcement; and pursuing legal action to recover losses. The investigation remains ongoing.