USD Stablecoin USDR Extends De-Peg to 37% Following $10 Million Governance Exploit

The crisis around European issuer StablR continues to deepen. At the time of writing, the decline of the USD stablecoin USDR has accelerated to 37%, reaching $0.63, while its euro counterpart EURR stood 22% below parity.

While the market is digesting the technical details of the recent $10 million hack, on-chain data highlights a far more important precedent: the hacker failed to cash out even a third of the minted volume, but the project’s empty exchange pools ultimately destroyed investor confidence.

The StablR team was forced to break months of silence on X to confirm the exploit and announce attempts to minimize the fallout. However, this step only intensified the panic, exposing a prolonged operational crisis at the startup.

Before this emergency update, the issuer’s official account had shown no signs of life since March 12, while the latest verified reserve audit data remained stuck at the level of the fourth quarter of 2025.

This prolonged stagnation in public communication and governance explains why the team ignored basic Web3 cyber hygiene, building the architecture not around code bugs, but around a fatal human factor.

Anatomy of a $10 million exploit

As analysts at Blockaid and PeckShield confirmed, the Ethereum contract was managed through a vulnerable “1-of-3” scheme, allowing any administrator to sign transactions alone. By compromising just one key, the hacker added his own address to the owner list, removed the legitimate participants, and locked out the team, becoming the sole master of the “money printer”.

The main market anomaly appeared immediately after the hacker minted 8.35 million USDR and 4.5 million EURR out of thin air. According to the latest reports, StablR had declared flawless fiat backing: 11,199,552 EUR in reserves against 11,053,276 EURR tokens, and 7,198,751 USD against 7,018,281 USDR tokens.

But apparently, these millions existed only on paper, and the issuer forgot to provide native liquidity on decentralized exchanges. The hacker’s attempt to dump the entire volume into the pools caused massive market slippage.

The nominal $10.4 million instantly evaporated, bringing the attacker only 1,115 ETH, or about $2.8 million in net profit, but this aggressive market dump completely destroyed liquidity and sent the stablecoins into their current collapse.

The situation continues to develop in real time, and amid the complete absence of fresh audits in 2026, holders of the remaining assets are advised to close any available positions to avoid a total loss of funds.