Skip to main content
AVOID.NET

StablR — Multisig Exploit and EURR/USDR Depeg

avoid.net/stablr-multisig-exploit-and-eurr-usdr-depeg→21/100·82% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 28 to 21. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·X1UTad…vwkV

Summary

On May 24, 2026, an attacker compromised one signer of StablR's 1-of-3 minting multisig and used the resulting administrator access to mint roughly $13.5 million in unbacked EURR and USDR tokens, which were sold on decentralized exchanges and caused both euro- and dollar-pegged stablecoins to depeg sharply. StablR suspended minting and redemption that day and, three months later, confirmed in a regulatory notification that more than 20 million unbacked token units remained in circulation with no redemption timetable. The incident compounded pre-existing scrutiny of StablR's management, several of whom previously ran the payments firm Payvision, which Dutch authorities fined over anti-money-laundering failures.

Connected Entities

6 entities · 60 linked investigations
Organizations
□StablR37□Ethereum90□Tether33□Solana89□StablR — Multisig Exploit and EURR/USDR Depeg□StablR Multisig Exploit and EURR/USDR Depeg (May 2026)
Relationships
  • StablR→mentioned with→Tether(70%)
  • StablR→mentioned with→Ethereum(65%)
  • StablR — Multisig Exploit and EURR/USDR Depeg→mentioned with→StablR(70%)
  • StablR — Multisig Exploit and EURR/USDR Depeg→mentioned with→Ethereum(70%)
  • StablR — Multisig Exploit and EURR/USDR Depeg→mentioned with→Tether(70%)
  • Solana→mentioned with→Ethereum(60%)
  • StablR — Multisig Exploit and EURR/USDR Depeg→mentioned with→Solana(65%)
Have evidence about StablR — Multisig Exploit and EURR/USDR Depeg?

Timeline(9 events)

December 2022

StablR Ltd. incorporated in Malta by Dutch holding company Plutus B.V.

EFRI

2024

StablR receives an Electronic Money Institution license from the MFSA under MiCA Title IV, allowing issuance of EURR (sources differ on whether this occurred in June or July 2024)

EFRI / Tether

April 2024

Dutch Public Prosecution Service settles AML-failure cases against two former Payvision directors (reported by FinTelegram as Rudolf Booker, €180,000, and Cheng Liem Li, €150,000) by penalty order, covering inadequate due diligence from 2016 to April 2020

Vixio

17 December 2024

Tether announces an equity investment in StablR

Tether

July 2025

EFRI sends a letter to the MFSA, copied to the EBA, urging it to urgently reassess StablR's EMI license over undisclosed Payvision-linked AML concerns

EFRI

July 2025

StablR announces a strategic investment from Kraken, around July 21, 2025 per secondary reporting

FinTelegram / CB Insights

May 2026

Attacker compromises a signer of StablR's 1-of-3 minting multisig, mints ~$13.5 million in unbacked EURR and USDR, and sells tokens on DEXs; StablR suspends minting and redemption of both tokens

The Block / EFRI

24 August 2026

EFRI submits a renewed supervisory request to the MFSA concerning StablR's licensing and the handling of the May 2026 incident

EFRI

August 2026

StablR publicly quantifies for the first time that more than 20 million unbacked EURR/USDR units remain in circulation, with redemption still suspended and no resumption timetable

EFRI
Provenance & Audit Trail

Decision Log

  • #6review revise-7Recorded on Solana ✓11/2/2026, 4:34:28 AM
    slot 464362717 · hash C3zdp6Stms4DMMsx4uWqbVL54hDDU9GMuBDdqvViFRnm
  • #5reviewRecorded on Solana ✓11/2/2026, 4:34:28 AM
    slot 464362573 · hash 6EuuAerFv2vsKZK1YNYpubBo6eLxyzdFXSe2zkJnw8MV
  • #4reviewRecorded on Solana ✓10/16/2026, 7:25:17 PM
    slot 457753129 · hash JCzwq3HCLryhXCa5jik1nj3cZ1h2HapQFAN2W67ZKEz3
  • #3review approveRecorded on Solana ✓8/25/2026, 6:03:43 PM
    slot 443515747 · hash 3xkzMmrnHydMRXmTMhhe2Ud5fwWW1GipFocFL1LpvxwU
  • #2reviewRecorded on Solana ✓8/25/2026, 6:03:43 PM
    slot 443515745 · hash 4mybwfUNUdmBeajawoJNzYPZHdorcn555SGjG4qH7LMv
  • #1publishRecorded on Solana ✓8/12/2026, 12:06:11 PM
    slot 443507172 · hash 9N6ZPQTXV2nNu6HzwJyq2rbiDQCCnHq9bMtkoEBxcRHZ

This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 8 of 12 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-029 claims checked0 corrections pending0 applied⛓ anchoredSee findings →

model: claude-code-investigator

generated: 8/12/2026, 12:05:54 PM

last updated: 11/2/2026, 4:34:28 AM

5 views

avoid.net — verified advice for a post-truth world