Stablecoin Issuer StablR Suffers Exploit, Loses $2.8 Million
Quick Look
- Stablecoin issuer StablR has reported an exploit resulting in its euro and US dollar stablecoins depegging.
- Blockchain security firm Blockaid stated that $2.8 million has been extracted so far due to a private key compromise.
AI-generated summary
Why It Matters
Stablecoin issuer StablR has experienced an exploit that caused its euro and US dollar stablecoins to depeg. Blockchain security firm Blockaid reported that $2.8 million was extracted, suspecting a private key compromise on a multisignature wallet.
Stablecoin issuer StablR has said it has suffered an exploit, resulting in its euro and US dollar stablecoins depegging.
Blockchain security firm Blockaid said on Sunday that the exploit had extracted $2.8 million so far. StablR said in a X post that it had identified an exploit and was “working to contain it and minimize impact.”
Blockaid said it suspected the cause of the exploit is a private key compromise of one owner on a multisignature wallet used for minting stablecoin, which allowed one of the three participants to sign a transaction.
Source: StablR
The attacker added themselves, replaced the other owners, and minted 8.35 million USDR and 4.5 million EURR, causing the stablecoins to depeg, Blockaid said.
The attacker then swapped the minted tokens worth around $10.4 million on decentralized exchanges for just 1,115 ETH or around $2.8 million due to thin liquidity.
The exploit adds to the over a dozen major crypto attacks that have happened so far this month, according to DeFiLlama, with significant exploits targeting THORChain, Verus Bridge, Echo Protocol and Polymarket.
StablR’s euro stablecoin, EURR, which has a $14 million market capitalization, lost 23% of its value, which depegged the asset from its $1.15 peg to 88 cents, according to CoinGecko.
Meanwhile, StablR’s US dollar stablecoin, USDR, with an $11 million market capitalization, dropped to 70 cents on Sunday morning.
Related: Map Protocol token plummets 96% after a quadrillion token mint exploit
StablR issues regulated collateralized stablecoins pegged to the euro and USD, with reserves held in segregated accounts.
The world’s largest stablecoin issuer, Tether, invested in StablR in December 2024.
EURR depegs 23%. Source: Peckshield
DeFi exploits continue to mount
Compromised private keys are becoming a common attack vector, with several DeFi protocols suffering exploits recently as a result of poor management.
Volo Vault, Wasabi Perps, Echo Bridge and Polymarket were all hit with private or admin key exploits over the past two months.
Meanwhile, the Bitcoin cross-chain bridge Map Protocol was exploited by a smart contract bug on May 21, when an attacker minted a quadrillion MAPO tokens.
Open Questions
- What specific measures are being taken to recover the stolen funds?
- Will StablR be able to restore the peg of its stablecoins?
- What are the long-term implications for StablR's reputation and user trust?
- Are there any regulatory actions expected following this exploit?
