StablR — Multisig Exploit and EURR/USDR Depeg
Summary
StablR is a Malta-licensed, MiCA-compliant stablecoin issuer backed by Tether that issues EURR (euro-pegged) and USDR (dollar-pegged) tokens on Ethereum and Solana. On May 24, 2026, an attacker compromised one signer in the platform's 1-of-3 minting multisig, replaced the remaining legitimate owners with malicious addresses, and minted approximately $13.5 million in unbacked tokens, realizing roughly $2.8 million (1,115 ETH) in net proceeds by dumping on decentralized exchanges. Both stablecoins lost significant peg value within hours; as of late July 2026, minting and redemption remain suspended and the reserve deficit had not been publicly resolved.
Connected Entities
1 entities- + 1 more
Timeline(12 events)
2024-07-01
StablR receives Electronic Money Institution (EMI) license from the Malta Financial Services Authority (MFSA), qualifying it to issue MiCA-compliant stablecoins under EU law.
CoinDesk2024-12-17
Tether announces a strategic investment in StablR, also agreeing to support compliance infrastructure via its Hadron tokenization platform.
CoinDesk2025-07-01
EFRI submits formal concerns to the MFSA alleging governance issues at StablR related to individuals with prior associations with Payvision. No substantive public MFSA response is issued.
EFRI2026-05-24
Attacker compromises one private key from StablR's 1-of-3 Ethereum minting multisig, replaces all legitimate signers with malicious addresses, and mints approximately 8.35 million USDR and 4.5 million EURR in unbacked tokens (~$13.5M face value). Proceeds of approximately $2.8M (1,115 ETH) are realized via DEX swaps. StablR immediately suspends minting and redemption.
CoinDesk, The Block, StablR official disclosure2026-05-24
Blockaid issues a community alert identifying the ongoing exploit. GoPlus Security independently confirms the attack as a key-management failure, not a smart contract vulnerability.
Blockaid on X2026-05-25
StablR publishes its initial public cybersecurity incident disclosure, confirms MiCA reserve backing shortfall, notifies MFSA under DORA, and requests all exchanges suspend trading and withdrawals of EURR and USDR.
StablR official2026-05-29
StablR formally activates its Recovery Plan under EBA Guidelines and provides notification to the MFSA.
StablR official2026-06-05
StablR issues further update confirming ongoing suspension of minting and redemption and continued forensic investigation.
StablR official2026-06-15
StablR three-week status report confirms incident is contained with no further unauthorized minting since May 24; minting and redemption remain suspended as a precautionary measure.
StablR official2026-06-24
StablR issues notification update maintaining suspension status with no material changes.
StablR official2026-07-08
StablR issues its most recent public update (as of July 22, 2026), reporting 'no material changes' to its prior disclosures; minting and redemption remain suspended.
EFRI citing StablR official2026-07-22
EFRI publishes analysis identifying gaps in public MFSA oversight and critical undisclosed information from StablR, including root cause, number of unauthorized tokens, reserve deficit size, and redemption timeline.
EFRIDecision Log
- #1publish⛓ pending8/12/2026, 12:06:11 PMhash: 9N6ZPQTXV2nNu6HzwJyq2rbiDQCCnHq9bMtkoEBxcRHZ
15 of 20 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/12/2026, 12:05:54 PM
last updated: 8/12/2026, 12:23:18 PM
avoid.net — verified advice for a post-truth world