#Web3安全指南 How Gauntlet and Morpho Navigated the Crisis: USDC Frontier Vulnerability Resolved

One of DeFi's most closely watched crisis management cases is nearing its conclusion. The fallout from the Resolv protocol exploit that began on March 22, 2026 has been largely contained — and Gauntlet has just shared a significant update on the final resolution.

———
How Did the Crisis Begin?

On March 22, 2026, the Resolv Labs infrastructure was compromised by a malicious actor who minted approximately $80 million in uncollateralized USR (Resolv USD). This unexpected move rippled across multiple DeFi protocols operating within Morpho markets.

Gauntlet-managed vaults — specifically the USDC Core and USDC Frontier series on Base network and Ethereum mainnet — had active allocations to Resolv-linked markets such as wstUSR/USDC and RLP/USDC. To make matters worse, automated allocation mechanisms funneled an additional $6.2 million USDC into those markets during the height of the crisis. The threat of bad debt was real.

———
Immediate Response: Speed and Transparency

Gauntlet moved quickly:

• Deposits were paused across all affected vaults
• Supply caps were reduced to zero
• A phased deallocation from Resolv markets was initiated
• Regular public updates were shared with the community throughout

By March 23, active negotiations with the Resolv team were underway, and a compensation plan was prepared and kept on standby if needed.

———
The Resolution Timeline

March 26: The USDC Core vault on Base was fully deallocated from all Resolv markets ($1.47M in liquidity preserved). The USDC Frontier v2 vault on mainnet followed suit ($1.95M in liquidity secured).

March 27 — Critical Update:

Gauntlet confirmed that the USDC Frontier (v1) vault on Base has been fully deallocated from all Resolv markets with zero bad debt. This marks the elimination of the most critical risk exposure.

• Deposits are now reopened for both v1 and v2 vaults
• Morpho announced it will remove the UI warning on March 28
• The mainnet USDC Frontier (v2) vault restart is in progress, with further steps pending incoming Resolv updates (timelock period: 3–5 days)

———
Key Lessons From This Incident

1. The hidden risk of auto-allocators: Automated allocation systems follow rules — they do not read market conditions in real time. During the crisis, this mechanic directed millions of additional dollars into compromised markets, amplifying exposure before manual intervention could take hold.

2. Protocol security does not equal ecosystem security: Morpho's core infrastructure had no vulnerability whatsoever. The root cause was entirely on the Resolv side. Yet in a tightly interconnected DeFi ecosystem, a single broken link can send shockwaves across the entire chain.

3. Transparent crisis communication builds trust: Gauntlet shared near-hourly updates on X throughout the incident. This level of openness helped contain panic and maintained community confidence during an otherwise volatile situation.

———
Current Status at a Glance

| Vault | Status |
|---|---|
| USDC Frontier Base v1 | No bad debt — deposits open |
| USDC Frontier Base v2 | Deposits open |
| USDC Frontier Mainnet v2 | Restart in progress |
| USDC Core Base | Fully resolved |
| USD Alpha & Prime vaults | Never affected |

———
Final Take

The DeFi ecosystem learns something every time it weathers a stress test like the Resolv exploit. Gauntlet and Morpho responded with both speed and accountability — and kept their communities informed every step of the way. Once the mainnet v2 vault restoration is complete, this incident is likely to become a reference case for effective crisis management in decentralized finance.
This article is compiled from publicly available sources and does not constitute investment advice. Always conduct your own research before participating in any DeFi protocol.