- Respipply has recently been exploited.
- The pirate stole $ 9.3 million.
- Add to the growing list of crypto exploits and hacks this year.
REPUPPLY, a Stablecoin loan protocol, is in shock from a feat that led to a loss of $ 9.3 million.
Investor investor deposits fell to $ 85 million, compared to $ 135 million before the incident, according to Defilma data, and the market value of its RSUP token fell to $ 7 million.
The striker, funded by the Tornado Cash confidentiality protocol, was able to target a bug in the system which enabled them to extract millions of a deposit of around $ 200,000.
“The attacker has exploited a price manipulation bug in the re -application pair contract,” said Meir Dolev, director of technology at Cyvers, a blockchain security company, said DL News.
Pairs contracts control how liquidity pools for chip pairs on the DEFI protocols work. Dolev said the striker had a huge loan, around $ 10 million, for very little guarantee by exploiting vulnerability.
“The affected contract has been identified and interrupted. Only the WStusr market has been affected and the protocol continues to operate as planned,” said Respipply after the incident.
Exploits
2025 was a particularly difficult year for hacks and exploits linked to crypto. According to Defillama, more than $ 2 billion was lost in only 2025, an increase of more than 50% compared to last year.
Recent exploits such as Zklend and Conic have been catastrophic, as the respective projects have since closed.
Respipply allows users to lend their stablescoins CRVUSD in curve chests to win the yield.
“There is no one of a curve who works on this project. It is a sad incident because they helped Crvusd to develop a little,” said Curve founder Michael Egorov, about the replenishment relationship with Curve.
Although only his insurance pool has been affected in the feat and there are millions of funds in the protocol, the feat causes some to question the overall security of the protocol.
“This feat could have been avoided with an appropriate entry validation, oracle controls and on -board tests,” said Dolev.
So far, the team has just recognized the situation, declaring that it will publish a complete post-mortem on the situation once a complete analysis has been carried out.
Zachary Rampone is a DL News correspondent. Do you have a tip? Contact it at zrampone@dlnews.com
