USDR Stablecoin Depegs to 37% After $10M Governance Exploit
StablR’s USDR stablecoin lost more than 70% of its dollar peg on May 24, 2026, after an attacker compromised a minting wallet and drained millions from the protocol in one of the sharpest stablecoin collapses this year.
USDR, an Ethereum-based ERC-20 token designed to hold a 1:1 value with the U.S. dollar, was trading at $0.282616 at the time of writing. The token’s sister stablecoin, StablR Euro (EURR), also lost its peg.
What to Know
- USDR collapsed to roughly $0.28, a discount of more than 70% from its intended $1 peg.
- An attacker exploited a compromised minting wallet to create unbacked tokens, which were swapped into ETH.
- The incident wiped more than $10 million from the combined market capitalization of StablR’s stablecoins.
Minting wallet compromise triggered the collapse
Blockchain security firm Blockaid was the first to publicly flag the incident. Its exploit detection system identified an ongoing attack on StablR, estimating that about $2.8 million had been extracted at the time of the alert.
🚨Community Alert
Blockaid's exploit detection system has identified an ongoing exploit on @StablREuro.~$2.8M extracted so far.
Both tokens are depegged: 0x50753cfaf86c094925bf976f218d043f8791e408 (StablR Euro)
and
0x7b43e3875440b44613dc3bc08e7763e6da63c8f8 (StablR USD) on…— Blockaid (@blockaid_) May 24, 2026
Source: @blockaid_ on X
According to Cointelegraph reporting, the attacker controlled one key of a 1-of-3 multisig minting wallet. That access allowed them to mint 8.35 million USDR and 4.5 million EURR, none of which were backed by reserves. The attacker then swapped the proceeds into roughly 1,115 ETH.
The headline figure of “$10 million” refers to the combined market-capitalization damage across both tokens, according to The Defiant, rather than the amount directly extracted. The Defiant reported EURR fell to roughly $0.82 and USDR to roughly $0.70 in the initial aftermath, though USDR has since fallen much further.
StablR acknowledged the breach shortly after Blockaid’s alert.
Security update: We have identified an exploit affecting StablR and are actively working to contain it and minimize impact.
Protecting our users and your funds is our top priority.
We'll share verified details and next steps as soon as possible.
— StablR (@StablREuro) May 24, 2026
Source: @StablREuro on X
The description of a “governance exploit” in some early reports does not match the available evidence. Reporting from multiple outlets describes a compromised private key or minting wallet, not a governance-vote manipulation. The distinction matters: key compromises are operational security failures, while governance exploits involve on-chain voting mechanisms.
Why the exploit raises questions about stablecoin governance risk
StablR markets itself as a Malta Financial Services Authority-authorized electronic money institution. USDR is positioned as a MiCA-aligned, fiat-backed stablecoin with reserves held in segregated accounts and independently reviewed by Grant Thornton. The incident now tests whether those regulatory and transparency safeguards translate into protection for holders during a crisis.
The exploit echoes broader concerns about key management in Ethereum-based protocols. A 1-of-3 multisig configuration, where a single compromised key grants minting authority, represents a critical single point of failure. Projects handling regulated stablecoins typically require higher signature thresholds.
StablR’s proof-of-reserve page states that reserve assets meet or exceed circulating supply. However, when an attacker can mint unbacked tokens at will, reserve adequacy becomes secondary to access control. The gap between USDR’s advertised backing and its current market price reflects how quickly confidence can evaporate.
The crypto market’s Fear & Greed Index sat at 25, in “Extreme Fear” territory, at the time of the incident. The exploit adds another data point for investors already navigating a difficult environment, particularly as macro uncertainty weighs on crypto sentiment and questions persist about compliance standards across the industry.
USDR’s 24-hour trading volume had fallen to just $725 at the time of writing, suggesting liquidity has effectively dried up. For holders, the practical ability to exit positions at any price appears severely limited.
StablR said it is working to contain the exploit and minimize impact but has not yet shared a post-mortem or a plan for affected holders. Whether the issuer’s regulated status and reserve structure enable any form of restitution remains an open question.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
