A $2.8 million exploit of the StablR protocol has triggered depegging across its euro-denominated (EURe) and US dollar-pegged (USDe) stablecoins. Security firm Blockaid identified a private key compromise affecting one owner in the minting multisig account as the likely culprit behind the attack.
The breach allowed attackers to mint unauthorized tokens, flooding the market with fresh supply and breaking the peg mechanisms that anchored both assets to their respective fiat values. EURe and USDe both traded below their intended $1 parity levels as liquidity pools absorbed the dumped tokens. The exploit exposed a critical vulnerability in StablR's multisig architecture, which failed to prevent a single compromised key from triggering mass minting.
StablR operates as a decentralized stablecoin protocol designed to issue collateralized tokens backed by real-world assets and blockchain collateral. The euro stablecoin EURe targets European users seeking non-custodial exposure to EUR parity, while USDe serves the broader stablecoin market. Both rely on governance mechanisms and collateral reserves to maintain stability. The private key compromise bypassed these safeguards entirely.
On-chain data showed attackers transferred significant portions of freshly minted tokens to decentralized exchanges, likely swapping them for ETH or other assets to launder proceeds. The $2.8 million figure represents the direct loss from newly minted tokens that escaped the protocol's control.
StablR's development team announced emergency measures to halt further minting and investigate the extent of the key compromise. However, rebuilding trust in both stablecoins will require addressing fundamental governance weaknesses. Multisig setups are only as secure as their most vulnerable signatory, and a single-key compromise creating unlimited mint exposure represents poor protocol design.
The incident underscores an ongoing challenge for stablecoin issuers. While decentralized designs appeal to users skeptical of traditional finance, they introduce custody and operational risks that centralized rivals like USDC