MANTRA Suspends Unbonding Requests for 7 Days Following Security Breach

TL;DR:

• Suspension of operations: MANTRA has temporarily blocked all new token unbonding requests for a period of seven days following a security incident.
• Identified attack vectors: Initial reports indicate a security flaw and unauthorized access incidents related to Web3Auth and Keplr wallets, which reportedly allowed private keys to be compromised.
• Measures for active users: The project indicated that the emergency measure does not directly affect requests already underway within its standard eight-day waiting period.

This Friday, November 13, MANTRA announced a 7-day emergency pause on all new token unbonding transactions. The measure is taken after recording incidents of unauthorized access and vulnerabilities in private key management. The corrective measure seeks to contain potential asset exposures and safeguard user funds within the decentralized finance (DeFi) and real-world assets (RWA) ecosystem.

Dear MANTRA community,

As a direct result of the ongoing Web3Auth & Keplr wallet/private key exploit, we have received numerous complaints from the community about the hackers unbonding their staked MANTRA tokens without their consent. This comes after any liquid MANTRA tokens…

— MANTRA | The EVM L1 for RWAs (@MANTRA_Chain) November 13, 2026

Information reported by official channels and sector analysis platforms indicates that the technical incident is linked to security flaws detected in the interaction with authentication and wallet providers Web3Auth and Keplr. Various users reported that malicious actors managed to extract liquid assets and execute the unbonding of staked tokens without the original owners’ consent.

In response to this situation, the development team implemented an automated temporary freeze through governance and emergency network mechanisms to mitigate operational impact.

Impact on the waiting period and redelegation recommendations

The temporary freeze on staking withdrawal requests operates specifically on new requirements attempting to enter the system, while the protocol maintains constant monitoring of previous operations.

Technical data and community notices point out that unbonding requests already going through their standard eight-day waiting period are not automatically covered by the seven-day interruption. For this reason, the organization directly urged users whose tokens are in the unlocking process to perform an immediate redelegation before the eight-day deadline is met, with the purpose of preventing fund appropriation by addresses associated with the exploit.

At the same time, the MANTRA ecosystem has coordinated joint efforts with the engineering teams of Web3Auth and Keplr to audit points of failure, identify gaps in signature infrastructure, and advance asset recovery efforts.

Market reaction and token outlook

The announcement of the security breach and subsequent operational freeze generated corrections in the pricing of the protocol’s native token. According to records from major exchanges and market aggregators, the asset experienced an approximate 7.3% pullback in its price in the hours following the incident report, reflecting temporary investor caution amid disruptions in liquidity and governance operations.

Crypto market analysts point out that the short-term stability of the network will depend on the effectiveness of the security patches implemented in collaboration with the integrated wallets. Likewise, the development team is expected to publish a detailed technical report (post-mortem) once the seven-day evaluation period concludes and regular functions of the MANTRA mainnet are fully restored.