SHOCKING Stablecoin Hack: $13.5M Heist Uncovered!

by

Market Mayhem

Here’s the Scoop:

  • That StablR concern has pulled the plug on their USDR and EURR tokens after some digital outlaw did ’em dirty. Now these so-called stablecoins are about as stable as a drunk on a tightrope, and they’re falling short of that 1:1 backing MiCA demands like a sinner short of heaven.
  • The hole in their defense was dumber than a mud fence – a multisig wallet where just one out of three keys could say ‘yes’ to any transaction. The varmints got their hands on one key, made themselves administrators, and kicked out the honest signers. Then they printed up $13.5 million in air-money, but thanks to thin trading, they only managed to cash out $2.8 million. A poor return for such a bold caper.
  • After the ruckus, these tokens shed value faster than a snake sheds skin – down 50% in no time. USDR is now hovering at $0.994, while EURR is wallowing at $0.548, which is a mite low compared to the euro‘s $1.16. It’s like watching a racehorse decide to take a nap.

That European stablecoin outfit, StablR, has called a halt to making and redeeming their USDR and EURR tokens after a cyber-sneak attack left everything under-collateralized. So says the company, in a statement that I reckon was drafted with a quill pen while they were panicking.

A blockchain gumshoe by the name of ZachXBT blew the whistle over the weekend, pointing out that two contracts linked to StablR’s stablecoins looked about as secure as a screen door on a submarine.

The Malta-based folks said they spotted some ‘irregularities’ in their systems after their own alarms started blaring. Took ’em long enough, I’d say.

StablR hit the freeze button on token operations and beseeched exchanges to stop all trading, deposits, and withdrawals for both tokens while they try to figure out how they got hoodwinked. USDR’s market cap is a modest $20 million, and EURR’s is $10 million, according to CoinGecko, which is chump change in the grand scheme of things.

They came clean and admitted that the tokens out there aren’t fully backed 1:1 like MiCA requires. It’s like admitting your bank account is backed by IOUs from your dead uncle.

They plan to give a holler to Malta’s financial watchdog, the MFSA, under the EU’s resilience act and MiCA rules. They’ve also roped in outside cybersecurity experts and the long arm of the law. It’s a regular barn dance of bureaucrats and techies.

GoPlus Security, a firm that looks after blockchain safety, says the attack probably came from a flaw in StablR’s multisig wallet setup on Ethereum. A flaw so obvious, it’s like leaving the key under the doormat.

According to GoPlus, the minting wallet was set up with a 1-of-3 multisig, meaning any one of three authorized parties could give the green light all by their lonesome. That’s like giving three kids one match each and hoping they don’t start a fire.

The researchers tell us the attackers got hold of one key, made themselves admins, and kicked out the real signers. Then they minted about 8.35 million USDR and 4.5 million EURR, which at peg is around $13.5 million in pure fantasy money.

Because the decentralized exchanges had about as much liquidity as a dried-up creek, the attackers could only cash out about $2.8 million from their freshly printed stash. A lesson in why you don’t sell lemons in a lemonade stand with no customers.

StablR’s tokens took a nosedive, losing half their peg in a jiffy before starting to climb back. USDR is now at $0.994, and EURR is trudging along at $0.548, which is a far cry from the euro’s $1.16. It’s like a proud eagle reduced to a chicken.

The big cheese, CEO Gijs op de Weegh, says they’re acting ‘with full transparency’ while the investigation rolls on. I’ll believe it when I see it, and even then I’ll doubt it.

Read More

2026-05-26 14:44