StablR, a regulated stablecoin issuer, is facing a significant crisis after an attacker compromised a private key in its minting multisignature account. This breach enabled the creation of millions of its EURR and USDR tokens, leading to sharp depegging of both the euro- and dollar-pegged stablecoins and a loss exceeding $2.8 million.
The root of the exploit lies in a weak 1-of-3 multisignature setup, which allowed the attacker to add themselves as an owner, remove legitimate signers, and mint approximately 8.35 million USDR and 4.5 million EURR tokens. These newly minted tokens were then sold on decentralized exchanges, but due to poor liquidity, they fetched only about 1,115 ETH—worth around $2.8 million—well below their intended value.
StablR’s euro stablecoin, EURR, with a market cap near $14 million, dropped about 23% from its $1.15 peg to $0.88 in EUR/USD markets, while the USDR token fell roughly 30% to $0.70 from $1. This depegging reflects significant market stress triggered by the exploit.
Unlike vulnerabilities rooted in smart contract flaws, this incident highlights failures in key management and governance controls, according to blockchain security analysts. Multi-signature wallets are intended to prevent unilateral access, but the low threshold in this case made it vulnerable to takeover.
The attack comes amid a broader wave of DeFi and crypto platform exploits in recent weeks. Other projects including THORChain, Verus Bridge, Echo Protocol, and Polymarket have suffered from private key or administrative breaches, underscoring a rising trend of security lapses in crypto custody practices.
StablR is positioned as a fully regulated stablecoin issuer with segregated reserves held at reputable financial institutions. Its tokens operate on Ethereum and Solana blockchains, and it emphasizes compliance and transparency through proof-of-reserves audits. Notably, Tether, the leading stablecoin operator globally, invested in StablR last year.
No updates were available from StablR’s official communication channels at the time of this report, while market participants continue to monitor the fallout and potential remediation steps.