StablR's two stablecoins, EURR and USDR, have lost their peg after a $2.8 million exploit tied to a private key breach. The incident, which drained funds from the issuer's reserves, sent both tokens trading below their intended values against the euro and the dollar. Questions are now swirling around the security of the company's multisig governance setup.
The private key breach
An attacker gained control of a private key that gave access to StablR's wallet infrastructure, according to information from the company. That single compromised key was enough to move $2.8 million worth of assets, causing the stablecoins to break their 1:1 pegs. EURR and USDR have not yet recovered their target prices.
Private keys are the cryptographic passwords that control blockchain wallets. If a key is stolen or leaked, anyone holding it can transfer funds without further authorization. In this case, the breach appears to have hit core reserve accounts, directly undermining the collateral backing each stablecoin.
Multisig governance under scrutiny
The exploit has raised concerns about how StablR managed its multisig governance. Multisignature setups require multiple private keys to approve a transaction, theoretically preventing a single point of failure. Yet here, a single private key was enough to trigger the $2.8 million loss.
That contradiction suggests either the multisig threshold was set too low, or that the attacker obtained more than one key. The company has not detailed which scenario played out. Industry observers note that a well-designed multisig system should have at least three signers, with keys stored separately. Any deviation from that standard increases risk.
Fallout for EURR and USDR
The depegging has left traders and users holding EURR and USDR in limbo. On decentralized exchanges where the tokens are listed, prices have fallen significantly below the $1 and €1 marks. Liquidity has dried up as market makers pull back. StablR has not announced a timeline for restoring the peg or whether it will compensate affected holders.
The two stablecoins are relatively small compared to giants like USDC or USDT, but the incident underscores how even minor infrastructure failures can destabilize a token's value rapidly. Without a clear recovery plan, confidence in StablR's ability to secure its system may take time to rebuild.
