Resolv
About
Resolv is a financial layer for stable, yield-bearing dollar returns backed by diversified crypto yield sources, built as a three-layer system. The protocol offers USR (a yield-bearing stablecoin), RLP (a leveraged yield product that serves as an insurance layer for USR holders), and professionally managed investment vaults — targeting crypto treasuries, DAOs, neobanks, and family offices seeking dollar-denominated yield without directional market risk.
Where Does Yield Come From?
Resolv generates yield from a pool of crypto assets that are managed in ways that avoid betting on price directions. Here is how it works.
Where the money goes
The pool holds two broad kinds of assets:
- ETH and BTC — but their price risk is neutralized. For every unit of ETH or BTC held, short futures contracts (a bet that the price will go down) are opened on exchanges like Binance, Hyperliquid, Deribit, and Bybit. The long and short cancel out, so the value depends only on the yield, not on whether crypto prices rise or fall (a "delta-neutral" setup).
- Stablecoins (USDC, USDT) — these are lent out or staked in DeFi lending protocols to earn returns.
Where the earnings come from
The pool makes money from three sources:
- Staking rewards on ETH
- Funding rate income from the futures market — the difference between the spot price and the futures price that traders pay each other
- DeFi yields from lending and staking the stablecoin portion
How profits and losses are shared
Every 24 hours — called an epoch — the pool calculates its result.
On a profitable day, the USD profit is split three ways:
- Base Reward (76.5%) — paid proportionally to holders of stUSR (staked USR) and RLP
- Risk Premium (13.5%) — goes only to RLP holders
- Protocol Fee (10%) — sent to Resolv's treasury (this fee starts at 0% in July 2025 and becomes fully active from August 2025)
On a loss day, the entire loss is absorbed by RLP alone. No rewards are distributed to anyone.
Important details about the tokens
- USR itself does not earn yield. To participate, you must stake it — either as stUSR (your balance of tokens increases over time) or as wstUSR (the value of each token increases over time).
- RLP has a fluctuating price. It collects extra returns during good epochs, but takes the first losses during bad ones.
- Minting (creating) and redeeming (cashing out) tokens currently has no fee.
Audits
| Audit / Date | Findings | Verdict |
|---|---|---|
MixBytes30-12-2025 - 14-01-2026 |
| The ExternalRequestsCoordinator contract passed the audit with zero findings across all severity levels, indicating no security vulnerabilities were identified in the scope reviewed. The protocol can proceed with confidence regarding this specific contract, though the audit scope was limited to a single contract and excluded related ExternalRequestsManager, treasury, oracle, and token contracts. |
Pashov Audit Group25-07-2025 - 27-07-2025 |
| The audit found one critical vulnerability (reward theft via self-transfer) that was resolved prior to publication, and two low-severity issues (one resolved, one acknowledged), making the core staking logic reasonably safe for deployment after the fixes. |
MixBytes08-04-2025 - 06-08-2025 |
| All two high-severity vulnerabilities (checkpoint-based withdrawal block and self-transfer effective balance inflation) were fixed, and the two low-severity findings were either fixed or acknowledged, making the Resolv Staking codebase secure for deployment. |
MixBytes28-05-2025 - 03-06-2025 |
| The audit found no critical, high, or medium severity vulnerabilities; only two low-severity issues were identified and both were promptly fixed by the client, indicating a well-secured contract for its intended treasury extension functionality. |
MixBytes23-06-2025 - 01-07-2025 |
| The audit found zero vulnerabilities across all severity levels, indicating the code is clean, modular, and well-structured for its limited scope. The protocol can be considered safe for deployment from a smart contract security standpoint based on this report. |
Pashov Audit Group15-04-2025 - 17-04-2025 |
| The audit identified one medium-severity griefing vector and several low-severity reward accounting issues, nearly all of which were resolved by the team prior to deployment, leaving only the acknowledged multi-token failure scenario as a residual design risk. |
Pashov Audit Group14-05-2025 - 15-05-2025 |
| The audit found no critical or high-severity vulnerabilities, with only one medium issue (claim bypass via withdraw) and two low-severity observations that were acknowledged by the team, indicating a reasonably solid security posture for the Resolv Staking contracts. |
MixBytes27-02-2025 - 14-03-2025 |
| The audit found no critical or high-risk vulnerabilities, and all three low-severity findings were fixed by the client during re-audit, resulting in a clean security posture for the Resolv Treasury Escrow system. |
MixBytes16-12-2024 |
| The audit found zero vulnerabilities across all severity levels, indicating that the LidoTreasuryExtension contract is well-implemented with proper safeguards for stETH rebasing mechanics, safe token wrapping/unwrapping, and robust access controls. No residual security concerns were identified. |
Pashov Audit Group09-12-2024 - 12-12-2024 |
| The audit found one High-severity and four Low-severity issues, all of which were resolved except one Low finding acknowledged by the team, indicating that Resolv's core stablecoin and redemption mechanisms are generally secure with only minor residual risks. |
MixBytes18-12-2024 - 20-12-2024 |
| The audit found one critical pricing bug that was promptly fixed, with all six low-severity items also resolved, leaving no open findings; the protocol's PoR oracle and redemption mechanics appear adequately secure for deployment. |
Sherlock02-12-2024 |
| The audit document was inaccessible for analysis due to severe PDF-to-text conversion failure (image-based/scanned PDF with unreadable OCR output), so no severity counts or findings can be reported from this source. |
MixBytes01-08-2024 - 30-09-2024 |
| The audit report for Resolv by MixBytes (reportedly conducted August–September 2024) could not be analyzed because the Google Drive document is not publicly accessible without authentication. |
Pashov01-08-2024 - 30-09-2024 |
| The audit report for Resolv by Pashov is stored behind a Google Drive authentication wall and was not accessible for automated analysis, so no assessment of protocol safety can be derived from this source. |
| The audit report could not be retrieved because the Google Drive file is not publicly accessible (requires sign-in). No assessment of the Resolv protocol's security findings can be made from this source. | |
Pashov01-07-2024 - 31-08-2024 |
| The audit report could not be accessed because the Google Drive file is behind a login wall; consequently, no security assessment can be derived from this source. |
MixBytes27-08-2024 - 06-09-2024 |
| The audit found no critical or high-severity vulnerabilities, and the three medium-risk issues were either fixed or acknowledged with reasonable rationale, indicating the Resolv Treasury contracts are reasonably secure for their intended use. The protocol's reliance on centralized access control and whitelisting is a design consideration noted in the report. |
| Unable to assess the audit findings as the report file could not be accessed due to Google Drive authentication restrictions. |
Legal
Legal form
Multiple entities: Resolv Digital Assets Ltd. (BVI Business Company, legal form code "ZHED", BVI company no. 2148231), Resolv Labs Ltd (BVI company no. 2127832), and Resolv Foundation (Cayman Islands company).
Registration jurisdiction
British Virgin Islands (Resolv Digital Assets Ltd. – registered 2024-05-09, address: Jayla Place, 2nd Floor, Road Town, Tortola; Resolv Labs Ltd – BVI company no. 2127832) and Cayman Islands (Resolv Foundation, c/o International Corporation Director Services Ltd., Harbour Place, 2nd Floor, 103 South Church Street, George Town, Grand Cayman, KY1-1106).
Status and notes
Operator disclosed via Terms of Service as Resolv Digital Assets Ltd. (RDAL) for token issuance/redemption/protocol operations, and Resolv Labs Ltd for the Site (app.resolv.xyz). Privacy Policy states Resolv Labs Ltd is the data controller registered in BVI. MiCA whitepaper (v1.1, 2025-12-22) prepared for Resolv Foundation, seeking admission to trading on Kraken (Payward Europe Solutions Ltd, Ireland). Governing law for Terms: Laws of British Virgin Islands. Governing law for MiCA whitepaper disputes: Laws of England and Wales (Part G) / Law of Ireland (Part E for Kraken admission). Airdrop Terms (effective 8 May 2025) issued by Resolv Foundation. Full legal pages: Terms of Service, Privacy Policy, RESOLV Staking Terms, and Airdrop Terms available at docs.resolv.xyz/litepaper/legal/.
