MANTRA Digital has temporarily suspended staking withdrawal operations for a period of seven days. This decisive measure follows a significant security incident involving the Web3Auth-Keplr integration, which reportedly allowed unauthorized access to the network’s token reserves.
According to CryptoActu, the protocol’s leadership acted swiftly to contain the breach. The incident centered on the Web3Auth-Keplr connection, a feature that previously facilitated seamless user interactions. However, the integration was found to be compromised, enabling bad actors to initiate the removal of MANTRA tokens without the necessary authorization credentials. This unauthorized extraction capability posed a severe threat to the integrity of the staking infrastructure.
To mitigate further financial loss and secure the platform, the team implemented an immediate freeze on all deblocking operations. This seven-day suspension applies specifically to the unlocking of staked assets, effectively halting the movement of tokens that were vulnerable to the exploit. The pause is designed to allow the development team to conduct a thorough forensic analysis of the breach and address the underlying vulnerabilities in the Web3Auth-Keplr system.
While the exact extent of the stolen assets remains unquantified in the provided reports, the swift imposition of the withdrawal ban underscores the severity of the security flaw. Users affected by this suspension will need to wait for the seven-day period to conclude before attempting to access their staked funds. The incident highlights the ongoing challenges faced by Web3 projects in maintaining robust security standards while integrating complex third-party authentication tools. MANTRA Digital has not yet released a detailed technical report on the root cause of the vulnerability, but the temporary halt is expected to restore confidence in the network’s security protocols once the issue is fully resolved.
