StablR Halts USDR and EURR Services Following $13.5 Million Exploit

European stablecoin issuer StablR has suspended issuance and redemption services for its USDR and EURR tokens following a security breach that led to the unauthorized minting of approximately $13.5 million in uncollateralized tokens. The incident, which occurred yesterday, has raised fresh concerns about the security of multi-signature wallet configurations in the rapidly evolving stablecoin market.

The Exploit and Immediate Aftermath

According to on-chain analyst ZachXBT and blockchain security firm GoPlus, the attacker exploited a vulnerability in StablR’s 1-of-3 multisig setup. By gaining administrative privileges through a single compromised key, the attacker was able to mint approximately 8.35 million USDR and 4.5 million EURR without proper collateral backing.

The exploit caused an immediate and severe market reaction. Both USDR and EURR depegged from their intended 1:1 value by as much as 50%. At the time of reporting, EURR was trading at approximately $0.548, well below its parity target. The depegging highlights the fragility of stablecoin mechanisms when the underlying collateral or minting controls are compromised.

Regulatory and Market Implications

StablR has publicly acknowledged that its token reserves no longer meet the 1:1 collateral ratio required under the European Union’s Markets in Crypto-Assets (MiCA) regulation. The company has formally requested that exchanges halt trading and suspend deposits and withdrawals for both affected tokens. This situation serves as a critical test case for MiCA’s enforcement mechanisms, as regulators now face the challenge of overseeing a post-exploit recovery while protecting consumer interests.

The incident also underscores a broader vulnerability in the crypto industry: the reliance on multi-signature wallets for critical administrative functions. While multisig setups are generally considered more secure than single-key systems, the 1-of-3 configuration—where only one key is needed to authorize transactions—offers minimal protection against a single point of failure. Security experts have long warned that such configurations are dangerously centralized in practice.

What This Means for Stablecoin Users

For holders of USDR and EURR, the immediate concern is the potential for significant financial loss. The depegging has already resulted in a 50% reduction in value for those unable to exit their positions before trading was suspended. Furthermore, the suspension of redemption services means that even at the depegged price, liquidity is effectively frozen.

This event serves as a reminder that stablecoins are only as reliable as the security infrastructure supporting them. Users should scrutinize the custody and administrative control mechanisms of any stablecoin they hold, particularly those with non-standard multisig configurations. The incident may accelerate calls for stricter security audits and mandatory insurance coverage for stablecoin issuers operating under regulatory frameworks like MiCA.

Conclusion

The StablR hack is a significant event in the European crypto landscape, exposing critical weaknesses in stablecoin operational security and regulatory compliance. As investigations continue and recovery efforts unfold, the industry will be watching closely to see how MiCA responds to this first major test. For now, the priority for StablR is to secure its systems, assess the full extent of the damage, and work with regulators and exchanges to chart a path forward for affected token holders.

FAQs

Q1: How did the StablR hack happen?
A1: The attacker exploited a 1-of-3 multisig vulnerability, meaning only one of three authorized keys was needed to gain administrative control. This allowed the attacker to mint uncollateralized tokens.

Q2: What is the current status of USDR and EURR tokens?
A2: Both tokens have depegged by approximately 50%. StablR has suspended issuance and redemption services and has asked exchanges to halt trading and suspend deposits and withdrawals.

Q3: Does this affect StablR’s compliance with MiCA regulations?
A3: Yes. StablR has stated that its token reserves no longer meet the 1:1 collateral ratio required under MiCA. The company is working with regulators to address the situation.