StablR exploit suspected $3M loss

StablR’s EURR and USDR stablecoins were flagged on May 24 in a suspected exploit that sent both tokens off peg and raised fresh questions about the issuer’s minting controls. Blockchain sleuth ZachXBT said two contracts tied to the Malta-based stablecoin company may have been attacked, with losses first described as more than $3 million. Crypto Briefing later reported the estimated losses had exceeded $10 million, citing ZachXBT’s findings and on-chain traces. StablR’s website on May 24 continued to describe EURR and USDR as fiat-backed stablecoins issued for payments, DeFi and institutional use. ### How did the suspected StablR exploit first surface? ZachXBT identified the incident on May 24 and said two contracts related to StablR had likely been exploited. Crypto Briefing’s report, based on his public posts, said the attacker wallet appeared to have been funded through Circle’s Cross-Chain Transfer Protocol on Noble and that seven addresses were linked to the incident. (cryptobriefing.com) Ground News’ aggregation of the Crypto Briefing report said the initial estimate was more than $3 million in EURR and USDR. The same aggregation said ZachXBT published the main wallet and a list of linked addresses while the incident was still developing. ### Why are estimates ranging from $2.8 million to more than $10 million? (cryptobriefing.com) BeInCrypto and Yahoo Finance reported the attacker extracted about $2.8 million after exploiting StablR’s minting contract on Ethereum. Those reports said the lower realized figure reflected what the attacker could actually convert out, rather than the full face value of tokens minted during the attack. (ground.news) Crypto Briefing, Cryptopolitan and other follow-on reports put the gross value of the exploit above $10 million. Ground News’ summary of the reporting said the attacker minted 8.35 million USDR and 4.5 million EURR, figures that imply a much larger notional breach than the amount ultimately swapped into more liquid assets. That gap matters in stablecoin incidents because newly minted tokens can break the peg even if only part of the issuance is cashed out. (finance.yahoo.com) ### What do the reports say the attacker actually did? Blockaid-linked reporting cited by multiple outlets said the incident appeared to stem from a compromised private key in a 1-of-3 minting multisignature setup. Those reports said the attacker added themselves, replaced other owners and then minted millions of USDR and EURR. (ground.news) Millionero Magazine’s recap, cited in the source brief, said the attacker’s funds were consolidated into a single wallet and that the address had initially received 1 ETH through Tornado Cash. Crypto Briefing’s version of events instead said the wallet appeared to have been funded through CCTP on Noble. The available reporting reviewed here does not reconcile those two funding-path descriptions, so both remain claims from secondary reports on May 24. (ground.news) ### What happened to EURR and USDR in the market? Live Bitcoin News, BeInCrypto and other outlets reported that both StablR tokens lost their pegs during the incident. BeInCrypto said EURR and USDR depegged after the exploit, while Live Bitcoin News described a $2.8 million attack tied to a compromised multisig wallet. Cryptopolitan and BingX summaries of ZachXBT’s posts said EURR and USDR each fell more than 20% below peg during the attack. (cryptobriefing.com) Cryptonomist reported EURR fell to about $0.88 and USDR to roughly $0.70, citing Blockaid’s account of an alleged private-key compromise tied to a minting multisig. ### What has StablR said publicly about reserves and redemptions? StablR’s website on May 24 still said EURR and USDR were fully backed by fiat reserves held with regulated financial institutions. (livebitcoinnews.com) Its proof-of-reserves page showed EURR supply and reserves updated as of May 21, and the company’s whitepapers said redemptions would be processed within 24 hours after redemption. StablR’s public site also continued to present the company as a regulated European stablecoin issuer with products available across Ethereum and Solana. (cryptopolitan.com) As of the material reviewed here, no separate StablR incident statement surfaced in search results on May 24, leaving the public account led mainly by ZachXBT’s posts and secondary reports citing Blockaid. (stablr.com 1) (stablr.com 2)