service outage

MANTRA halts new unstaking requests amid Web3Auth and Keplr exploit

37Importance
updatingStatus
2News media
Published
Updated

MANTRA paused new unstaking or unbonding requests after a Web3Auth and Keplr exploit was tied to affected wallets. The project also froze several hacker wallets and told affected users to redelegate tokens before the unbonding pause ends.

Key claims & sources

✓
MANTRA halted new unstaking requests after a Web3Auth and Keplr exploit was linked to the incident.
✓
The project paused new unbonding transactions for seven days.
✓
Hackers were trying to unstake tokens after liquid tokens were taken from affected wallets.

What it means

MANTRA is a token and staking-focused project, so an unbonding pause directly affects the normal exit path for staked holdings. The exploit mentioned here involves Web3Auth and Keplr, two pieces of wallet infrastructure that many users rely on to access accounts and move assets. A pause on new unstaking requests shows the project moving to control transfers out of staking while the wallet side of the incident is being handled.

For users, the immediate effect is that new exits from staking are blocked for a set period, and affected holders are being told to redelegate before the unbonding window closes. That changes what wallet owners can do with their tokens during the freeze and places more weight on whatever recovery steps MANTRA and wallet operators make available. It also means access to funds can hinge on timing, wallet status, and whether users can act before the pause ends.

The case sits at the point where staking design meets wallet security, and it shows how an exploit in access tools can spill into token movement controls. MANTRA’s response also raises the familiar trade-off between stopping suspicious exits and preserving the open movement that decentralized systems are built around. Freezing hacker wallets is a defensive step, but it also shows how much control can concentrate during an emergency.

Still unresolved is the scale of the wallet compromise and how many users are affected across the Web3Auth and Keplr incident. The seven-day unbonding pause sets a short timeline, but the next details that matter are whether redelegation works for every impacted holder and whether the frozen wallets stay locked. The final accounting will depend on what MANTRA and the wallet providers disclose next about the exploit and the affected accounts.

Market reaction i

MANTRAMANTRA the headline names this asset

MANTRA fell 1.6% in the 4 hours after the first headline.

$0.0026709 price at the headline
— 2 h before
-1.6% 4 h after
-2.5% 5 h after (so far)
First headline

12 prices, one every 30 minutes

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 13 12:36
+5 h 25 m
Nov 13 18:00
The Coin Republic context
Its angle: transactions, transaction, permission; with quotes

Other recent incidents

WhenWhat happenedFigure
2 days ago Edel Finance incident $300k
2 days ago PennysiaSettlement · Smart contract vulnerability incident $5.1k
3 days ago Rujira AMM Strategies · Swap Logic Flaw incident $200k
4 days ago Initia · Private key leak incident $615k
5 days ago Arcus · Accounting bug incident $2.2M

4307 incidents stored