Resupply
About
Resupply is a decentralized stablecoin protocol that issues the reUSD stablecoin through Collateralized Debt Positions (CDPs) backed by interest-bearing stablecoins (crvUSD and frxUSD) deposited on Curve Lend and Fraxlend. Users supply crvUSD or frxUSD as collateral to mint reUSD while continuing to earn the underlying lending yields — including lending fees, boosted CRV rewards, and any extra rewards — from those lending markets, allowing their stablecoins to "work up to 20 times as hard."
Where Does Yield Come From?
How Resupply generates yield for its users
Resupply builds its yield on top of two existing lending platforms (Curve Lend and Fraxlend). When you put stablecoins (crvUSD or frxUSD) into a Resupply CDP (a type of collateralized loan position), that collateral gets lent out on those platforms. You keep earning whatever those lending markets pay — lending fees, boosted CRV rewards, and any extras — just as if you had lent directly. So your stablecoin keeps working for you even while it backs your loan.
Borrowing reUSD
You can mint the protocol's stablecoin, reUSD, against your CDP. The borrowing cost (what you pay to hold a reUSD loan) is set by a formula: it picks the higher of half the underlying lending rate, half the sfrxUSD rate (a risk-free reference rate), or 2%. This lets you create leverage — your collateral keeps earning its lending yield, while the reUSD you borrow can go elsewhere for additional returns.
Peg-based rate adjustments
A dynamic priceWeight multiplier tweaks the borrow rate. When reUSD trades at its intended $1 peg, the rate sits at 50% of the reference rates. When reUSD drifts below peg, the rate rises, and the extra revenue goes to Savings reUSD (sreUSD). This mechanism helps pull the price back toward the peg.
Where protocol revenue comes from
The protocol makes money from two sources:
- Borrow rate fees – charged on reUSD loans
- Redemption fees – 1% per redemption (0.8% reduces borrower debt, 0.2% goes to the protocol)
How revenue is split (governance can change the percentages)
Each week, total revenue is divided among four recipients:
- 70% to staked RSUP holders (the protocol's governance token)
- 15% to sreUSD (an auto-compounding vault)
- 10% to the Insurance Pool
- 5% to the Treasury
RSUP token emissions
RSUP has no maximum supply and is minted on a schedule. New tokens are distributed to three groups:
- 50% as voting incentives (to encourage liquidity for reUSD and RSUP on exchanges)
- 25% to Insurance Pool depositors
- 25% to CDP borrowers (proportional to the borrow fees their lending pool generates)
Insurance Pool
Users are rewarded with reUSD (from borrow fees) and RSUP emissions to deposit reUSD as a safety buffer. When a CDP gets liquidated, the pool buys the collateral and covers any bad debt. The liquidated collateral (crvUSD or frxUSD) is then distributed to pool depositors.
Savings reUSD (sreUSD)
This is a standard vault (ERC-4626) with no lockups, cooldowns, or penalties. It auto-compounds reUSD yield from two sources: the weekly protocol revenue and the extra fees from the peg-adjustment mechanism. It also supports cross-chain transfers through LayerZero, so you can move sreUSD between different blockchains.
Persons
Wavey (wavey0x)
Yearn
Dudesahn
Yearn
C2tP
Convex Finance
Winthorpe
Convex Finance
Audits
| Audit / Date | Findings | Verdict |
|---|---|---|
yAudit25-11-2024 - 27-12-2024 |
| The audit uncovered several critical vulnerabilities in governance, liquidation, and vesting logic, all of which the Resupply team addressed before the report's publication. While the fixes are reassuring, the auditors' recommendation for additional fuzz/invariant testing and a follow-up review underscores that residual risks may remain in this sizable, modular codebase. |
ChainSecurity03-01-2025 - 25-02-2025 |
| The audit found no critical or high-severity vulnerabilities; all medium-severity issues were corrected during the engagement, and the remaining three low-severity open items were explicitly risk-accepted by the Resupply team, indicating a high overall security posture for the protocol's codebase. |
ChainSecurity14-09-2025 - 09-10-2025 |
| The audit by ChainSecurity found no open vulnerabilities in the Resupply CurveLend Operators contracts, with the sole medium-severity finding resolved before finalization; the report concludes that the codebase provides a high level of security while noting residual informational items and design considerations that were acknowledged by the team. |
ChainSecurity03-01-2025 - 27-07-2025 |
| ChainSecurity found no critical or high severity issues, with all 6 medium-severity findings resolved; the 6 remaining low-severity open findings were all risk-accepted by Resupply and do not present immediate systemic risk, though the protocol's security hinges on the continued stablecoin peg of the underlying crvUSD and frxUSD tokens. |
ChainSecurity21-07-202518-08-2025 |
| The audit finds the sreUSD codebase provides a good level of security, with all medium-severity issues resolved and open low-severity findings either risk-accepted or acknowledged under clear operational constraints. |
| With zero critical, high, or medium issues and only one low finding (fixed) plus two informational items, the audit confirms that Resupply's CurveLendOperator contracts are solid and present minimal security risk for their intended crvUSD allocation use case. | |
| The audit report was not available for analysis due to repeated fetch and parse failures, so no assessment of protocol safety can be derived from this document. |
Legal
Status and notes
No legal entity, imprint, terms of service, or privacy policy disclosed on any official source. The website resupply.fi and docs.resupply.finance lack any imprint, terms, or privacy pages. Website states 'Made by Convex and Yearn, in collaboration with DeFi trusted leaders.' The protocol is governed by a 3-of-4 Gnosis Safe multisig (Ethereum + Fraxtal) with members from Convex Finance and Yearn. Smart contracts are MIT-licensed and open source on GitHub (resupplyfi/resupply). No company name, registration number, or jurisdiction declared.
