Stablecoin issuer freezes tokens after $13.5M exploit

TLDR

StablR, a Malta based stablecoin issuer, has frozen its USDR and EURR tokens after a $13.5 million minting exploit left both assets undercollateralized.

1. An attacker abused a weak multisig admin wallet to mint $13.5 million of unbacked USDR and EURR, then dumped part of it on thin DEX liquidity.
2. StablR suspended minting and redemption, asked exchanges to halt trading, and both tokens depegged, with EURR still far below one euro.
3. Recovery depends on recapitalization and regulatory sign off under MiCA, while the incident highlights governance and key management risk in centralized stablecoins.

Deep Dive

1. How The $13.5M Exploit Worked

According to incident reporting, StablR used a 1 of 3 multisignature Ethereum wallet to control minting for StablR USD (USDR) and StablR Euro (EURR).

An attacker compromised one key, added their own address as administrator, removed legitimate signers, and then minted about 8.35 million USDR and 4.5 million EURR, totaling $13.5 million in unbacked supply.

They then sold these tokens into decentralized exchanges, netting roughly $2.8 million profit by exploiting thin liquidity, as detailed in the StablR exploit report.

2. Pegs, Freezes And User Impact

The extra unbacked supply left both stablecoins undercollateralized, violating the one to one backing required for European stablecoins under MiCA.

USDR, roughly a $20 million asset before the incident, briefly traded at a 50 percent discount before recovering to just under one dollar, while EURR, around $10 million, remains near $0.55 versus an implied one euro target in the same report.

StablR has suspended minting and redemption and requested that exchanges halt trading, and it has notified the Malta Financial Services Authority and law enforcement while external cybersecurity firms investigate.

3. What To Watch Next

For holders, the key question is whether StablR can restore full collateral, for example via new capital, insurance, or clawbacks, and then reopen orderly redemptions at or near par.

Regulators will assess whether StablRs controls, including the weak 1 of 3 multisig and admin permissions, satisfy MiCA and the EUs Digital Operational Resilience Act, which may influence how fast any recovery plan can proceed.

More broadly, stablecoin users and institutions are likely to scrutinize how issuers secure minting keys, structure multisigs, and limit admin powers, since governance failures can break pegs even when reserves are nominally high quality.

Confidence: high, based on detailed contemporaneous reporting from the incident.

Conclusion

A single compromised admin key at StablR turned two small eurozone stablecoins into undercollateralized assets and forced a full operational freeze.

The episode underlines that stablecoin risk is not only about reserve assets but also about wallet configuration, access controls, and regulatory oversight.

For crypto users, the practical takeaway is to treat centralized stablecoins as exposures to issuer governance and security, and to monitor peg behavior, redemption policies, and incident disclosures closely.