--- title: "StablR Stablecoins Depeg After $2.8 Million Exploit" type: "News" locale: "en" url: "https://longbridge.com/en/news/287456639.md" description: "StablR's stablecoins, EURR and USDR, lost their pegs after a $2.8 million exploit on May 24, attributed to a private key compromise. An attacker gained control of the minting contract, minting $10.4 million worth of tokens. The attack highlighted governance failures, as a single compromised key allowed unauthorized minting. EURR fell 20% and USDR lost its dollar peg due to sell pressure. StablR, licensed in Malta, has ties to Tether, but recovery strategies remain unclear." datetime: "2026-05-24T08:50:28.000Z" locales: - [zh-CN](https://longbridge.com/zh-CN/news/287456639.md) - [en](https://longbridge.com/en/news/287456639.md) - [zh-HK](https://longbridge.com/zh-HK/news/287456639.md) --- # StablR Stablecoins Depeg After $2.8 Million Exploit StablR’s Euro (EURR) and StablR USD (USDR) stablecoins lost their pegs on Ethereum on May 24 after an exploit on the project’s minting contract allowed an attacker to extract roughly $2.8 million. Blockchain security firm Blockaid flagged the ongoing attack and attributed the breach to a private key compromise rather than any flaw in StablR’s smart contracts. **How the Attacker Seized Control Of StablR** The minting multisig governing StablR’s token issuance required just one of three authorized signatures to act. That 1-of-3 threshold meant a single compromised key was enough to seize full control of the contract. The attacker added their own address as an owner and removed the two legitimate signers. They then minted 8.35 million USDR and 4.5 million EURR, a combined face value of roughly $10.4 million at peg. Blockaid outlined the sequence in a follow-up post on X: “This is not a smart contract bug – it’s a key management and governance failure.” Thin liquidity on decentralized exchanges (DEX) sharply limited the attacker’s return. Swapping $10.4 million in freshly minted tokens into shallow pools yielded only about 1,115 ETH, worth roughly $2.8 million. EURR fell roughly 20% on tracked Ethereum liquidity and USDR also lost its dollar peg as sell pressure overwhelmed available pools. **A Recurring Governance Blind Spot** The episode mirrors past stablecoin attacks where unauthorized minting triggered rapid depegs. More broadly, it follows a persistent wave of private key DeFi exploits that have contributed to record crypto theft figures in recent years. A similar Resolv stablecoin breach earlier in 2026 used near-identical mechanics, where a single insufficiently protected key enabled minting at scale. StablR holds an Electronic Money Institution (EMI) license from Malta’s financial regulator. The company operates under the EU’s Markets in Crypto-Assets Regulation (MiCA). It received a strategic investment from Tether in late 2024. How those regulatory and financial ties factor into any recovery response has not yet been disclosed. ### Related Stocks - [COIN.US](https://longbridge.com/en/quote/COIN.US.md) - [GBTC.US](https://longbridge.com/en/quote/GBTC.US.md) - [GLXY.US](https://longbridge.com/en/quote/GLXY.US.md) - [CRCL.US](https://longbridge.com/en/quote/CRCL.US.md) - [RIOT.US](https://longbridge.com/en/quote/RIOT.US.md) - [BTCW.US](https://longbridge.com/en/quote/BTCW.US.md) - [IBIT.US](https://longbridge.com/en/quote/IBIT.US.md) - [BTCO.US](https://longbridge.com/en/quote/BTCO.US.md) - [BITB.US](https://longbridge.com/en/quote/BITB.US.md) - [ARKB.US](https://longbridge.com/en/quote/ARKB.US.md) - [HODL.US](https://longbridge.com/en/quote/HODL.US.md) - [FBTC.US](https://longbridge.com/en/quote/FBTC.US.md) - [BRRR.US](https://longbridge.com/en/quote/BRRR.US.md) - [EZBC.US](https://longbridge.com/en/quote/EZBC.US.md) - [BITO.US](https://longbridge.com/en/quote/BITO.US.md) - [USDTHKD.VAHK](https://longbridge.com/en/quote/USDTHKD.VAHK.md) - [USDTUSD.VAHK](https://longbridge.com/en/quote/USDTUSD.VAHK.md) ## Related News & Research - [Circle, the first stablecoin to go public, has actually issued its own token.](https://longbridge.com/en/news/287030047.md) - [Circle: Agentic's Uber moment hasn't arrived, yet](https://longbridge.com/en/news/287260633.md) - [Circle, the first stablecoin to go public, has actually issued its own token.](https://longbridge.com/en/news/286785804.md) - [Duan Yongping's first investment in a crypto company: Why Circle?](https://longbridge.com/en/news/287030025.md) - [Stripe-backed Tempo taps $7.5 billion DeFi lender Morpho to expand beyond payments](https://longbridge.com/en/news/287085094.md)