Resupply offers an interesting yield-stacking model backed by two established DeFi teams, but the recent $9.6M exploit raises serious concerns about smart contract security for new vault deployments. The protocol's dependency on Curve and Frax lending markets creates layered risk. Approach with caution and monitor for post-exploit security improvements.
Risk Breakdown
Top Risks
Resupply suffered a $9.6M donation-attack exploit in June 2025 on a newly deployed wstUSR vault, demonstrating that empty-pool vulnerabilities in freshly launched markets remain a critical attack vector.
reUSD is a stablecoin backed by other stablecoins deposited in Curve Lend and Fraxlend — any depeg or insolvency in those underlying lending markets cascades directly into reUSD collateral quality.
RSUP has no max supply and follows a perpetual inflation schedule (2% per year after year 5), diluting holders if protocol revenue does not grow to offset emission pressure.
Frequently Asked Questions
Is Resupply safe to use?
What are the main risks of using Resupply?
What is Resupply's risk score breakdown?
How does Resupply compare to other CDP protocols?
Has Resupply ever been hacked or exploited?
Incident History
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.