StablR Stablecoins – When A Key Turns Into a Catastrophe

by

StablR’s Euro (EURR) and StablR USD (USDR) stablecoins turned their trusted pegs into mere props on Ethereum on May 24, after a dastardly intruder siphoned out about $2.8 million through the project’s minting contract.

A cyber‑sleuthing outfit called Blockaid raised the alarm, chalking the break‑in up to a private key being as loose as a cat’s tail rather than any eldritch flaw in StablR’s smart contract mysticism.

🚨Community Alert
Blockaid’s ever‑watchful system has caught an ongoing exploit on @StablREuro.

~$2.8M drained so far.

Both tokens are wandering off the rails: 0x50753cfaf86c094925bf976f218d043f8791e408 (StablR Euro)
and
0x7b43e3875440b44613dc3bc08e7763e6da63c8f8 (StablR USD) in the ether‐mystery void…

– Blockaid (@blockaid_) May 24, 2026

How the Furtive Hacker Seized Sovereignty Over StablR

The system that governs the minting of StablR tokens was as patient as a monastery monk: a 1‑of‑3 signature would grant full command. A single compromised key was enough to trample the legitimate signatories and take the reins.

The attacker added himself to the list of owners, kicked out the two honest souls, and proceeded to mint a staggering 8.35 million USDR and 4.5 million EURR- a combined face value of about $10.4 million at the supposed peg.

Blockaid posted a follow‑up on X, dripping with dry sarcasm:

“This is not a smart contract bug – it’s a key‑management fiasco. Kinda like a broken lock on a coffee shop, but with crypto.”

Liquidity on decentralized exchanges (DEXs) proved to be a lacquer of butter-it was too thin to absorb the flood. The freshly minted tokens could only be swapped for about 1,115 ETH, roughly $2.8 million. EURR slumped almost 20% on tracked Ethereum reserves, and USDR toppled from its dollar peg as selling pressure shook the little coin like a trembling violist.

A Recurring Blind Spot in Governance

This debacle echoes past stablecoin falls where unchecked minting rattled the market into a near‑therapeutic frenzy. More broadly, it fits the attic of a growing cadre of private‑key DeFi heists, fueling record cryptocurrency theft coordinates.

Earlier this year, a Resolv stablecoin breach followed exactly the same playbook, a single sloppy key giving minting access on a grand scale.

StablR flaunts an electronic money institution licence granted by Malta’s regulator, and it operates under the EU’s MiCA framework. In late 2024, Tether tied its fortunes to the firm. The intermingling of regulatory coats and capital ties sows doubt about the cost of a prompt resolution-though the decision remains as cryptic as the gods of Delphi.

Read More

2026-05-24 12:07