Skip to content
Fear & Greed20 Extreme Fear
Crypto market$2.36T−3.5%24h breadth130 up120 downBitcoin$69,345−4.9%Ethereum$1,961−3%Solana$81−1.8%XRP$1.02−1.4%BNB$641−2.9%Top gainersOSMO$0.037+13.7%EXOD$4.80+11.3%S$0.038+7.7%Top losersBTW$0.874−14.7%KNTQ$0.284−10.8%AERO$0.483−8.2%StocksNVDA$166−4.3%TSLA$397+1.7%AAPL$355−0.2%MSFT$523+0.4%COIN$131−4.1%
Advertisement
MANTRA halts new unstaking requests amid Web3Auth and Keplr exploit

MANTRA halts new unstaking requests amid Web3Auth and Keplr exploit

MANTRA implements a temporary freeze on unbonding transactions to combat third-party wallet vulnerabilities.

by Estefano Gomez

1 min read

In Security

Share

Follow on Google

MANTRA has temporarily suspended new token unbonding transactions for seven days in response to an ongoing exploit involving Web3Auth and Keplr wallets that has allowed attackers to access users’ private keys and unstake their MANTRA holdings.

The project on Friday said community members had reported that hackers were unbonding their staked tokens without consent after stealing their liquid MANTRA holdings. MANTRA has already frozen several wallets associated with the attackers through Governance Proposal 41 and is working with Web3Auth and Keplr on recovery efforts.

https://twitter.com/MANTRA_Chain/status/2121188399423864963?a=0Z-D9o5sCfScOY7TKWg&s=20

The seven-day emergency pause is aimed at limiting further losses but does not cover unbonding requests that are already underway. Users with tokens currently in the eight-day unbonding process must redelegate them before the period expires to prevent attackers from claiming and transferring the funds. Any subsequent unbonding attempts will remain paused until the restriction is lifted.

MANTRA said it would reassess the measure after seven days and reserved the right to impose additional pauses depending on the situation.

Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.

Next in Security Arcus pays out 2,234,391 USDG after integer underflow exploit