MANTRA halts new unstaking requests amid Web3Auth and Keplr exploit
MANTRA has temporarily suspended new token unbonding transactions for seven days to combat an ongoing exploit involving Web3Auth and Keplr wallets.
The blockchain project on Friday announced the emergency measure after community members reported that hackers were unbonding their staked tokens without consent following theft of their liquid MANTRA holdings. MANTRA has already frozen several wallets associated with the attackers through Governance Proposal 41 and is collaborating with Web3Auth and Keplr on recovery efforts.
Emergency pause details
The seven-day freeze aims to limit further losses but does not cover unbonding requests already in progress. Users with tokens currently in the eight-day unbonding process must redelegate them before the period expires to prevent attackers from claiming and transferring the funds.
The seven-day emergency pause is aimed at limiting further losses but does not cover unbonding requests that are already underway.
Next steps
MANTRA stated it would reassess the measure after seven days and reserved the right to impose additional pauses depending on the situation. Any subsequent unbonding attempts will remain suspended until the restriction is lifted.