Is Resupply Safe?

|CDP
C

Risk Grade: C (45/100)

Resupply is rated as elevated risk — multiple novel mechanisms and notable interaction risks.

Resupply offers an interesting yield-stacking model backed by two established DeFi teams, but the recent $9.6M exploit raises serious concerns about smart contract security for new vault deployments. The protocol's dependency on Curve and Frax lending markets creates layered risk. Approach with caution and monitor for post-exploit security improvements.

Resupply is a stablecoin protocol built by Convex Finance and Yearn Finance that lets you borrow reUSD against yield-bearing stablecoin positions from Curve Lend and Fraxlend. It was exploited for $9.6M in June 2025 via a donation attack on an empty vault.

TVL

$38M

Mechanisms

7

Interactions

5

Value Grade

C-

Key Risks for Resupply Users

1.

Was exploited for $9.6M in June 2025 through a donation attack on an empty vault

2.

reUSD depends on Curve Lend and Fraxlend remaining solvent — problems there affect your collateral

3.

RSUP token has no supply cap and inflates perpetually, which can dilute your holdings over time

Top Risk Factors

  • Resupply suffered a $9.6M donation-attack exploit in June 2025 on a newly deployed wstUSR vault, demonstrating that empty-pool vulnerabilities in freshly launched markets remain a critical attack vector.
  • reUSD is a stablecoin backed by other stablecoins deposited in Curve Lend and Fraxlend — any depeg or insolvency in those underlying lending markets cascades directly into reUSD collateral quality.
  • RSUP has no max supply and follows a perpetual inflation schedule (2% per year after year 5), diluting holders if protocol revenue does not grow to offset emission pressure.

Risk Score Breakdown

Resupply's highest risk area is Vitality Risk (7/10). Here's how each dimension contributes to the overall 45/100 score:

Mechanism Novelty6/15
Interaction Severity10/20
Oracle Surface4/10
Documentation Gaps3/10
Track Record7/15
Scale Exposure3/10
Regulatory Risk5/10
Vitality Risk7/10

Read the Full Resupply Risk Report

This protocol has 2 collapse scenarios. 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.

View Full Report →

Related CDP Safety Analyses

Related CDP Investment Analyses

Ratings use Hindenrank's eight-dimension risk rubric. Lower score = lower risk. Grades range from A (safest) to F (riskiest). This is not financial advice.