en
Back to the list

MANTRA halts new unstaking requests amid Web3Auth and Keplr exploit

source-logo  cryptobriefing.com 12 m
image

MANTRA has temporarily suspended new token unbonding transactions for seven days in response to an ongoing exploit involving Web3Auth and Keplr wallets that has allowed attackers to access users’ private keys and unstake their MANTRA holdings.

The project on Friday said community members had reported that hackers were unbonding their staked tokens without consent after stealing their liquid MANTRA holdings. MANTRA has already frozen several wallets associated with the attackers through Governance Proposal 41 and is working with Web3Auth and Keplr on recovery efforts.

Know when your
coins move

Alerts, real-time prices, and market news — all in one app
qr-code Point your phone camera to install
4.8 based on 40K reviews in the App Store and Google Play
https://twitter.com/MANTRA_Chain/status/2121188399423864963?a=0Z-D9o5sCfScOY7TKWg&s=20
The seven-day emergency pause is aimed at limiting further losses but does not cover unbonding requests that are already underway. Users with tokens currently in the eight-day unbonding process must redelegate them before the period expires to prevent attackers from claiming and transferring the funds. Any subsequent unbonding attempts will remain paused until the restriction is lifted.

MANTRA said it would reassess the measure after seven days and reserved the right to impose additional pauses depending on the situation.

cryptobriefing.com