On-Chain Footprint of the Resolv Attacker Revealed
According to the latest tracking by on-chain security monitors, an address linked to the Resolv protocol incident has begun a sophisticated fund relocation strategy. Since March 22, a series of calculated moves have been made to obscure the origin of the illicit assets.
Five-Stage Fund Conversion Unfolds
- Initiated with 100,000 USDC to mint 50 million USR tokens through exploit leverage
- Converted 35 million USR into wstUSR to enhance liquidity options
- Began systematic swaps of wstUSR into major stablecoins like USDC and USDT
- Employed small-volume, high-frequency trades to avoid detection thresholds
- Deployed acquired stablecoins to purchase ETH across decentralized exchanges, now holding over $4.55 million in value
Stealth Tactics Indicate Advanced Planning
The attacker’s behavior reflects a high level of operational caution. Instead of immediate cash-outs, the use of layered transactions and staggered timing suggests long-term obfuscation. This approach may facilitate future fund deployment or sustained position building. The address remains active, with security teams closely monitoring its next moves.