MANTRA imposes emergency seven-day unbonding freeze following wallet exploit

MANTRA has enacted an emergency seven-day freeze on all unbonding transactions to halt unauthorized token unstaking linked to an upstream Web3Auth and Keplr wallet and private key exploit, according to an announcement shared by the protocol. The intervention follows community reports that attackers were unbonding staked MANTRA tokens after already draining liquid tokens from compromised accounts.^[1][2][3]

The protocol confirmed it has already frozen several attacker wallets under Governance Proposal 41 while assisting Web3Auth and Keplr wallet teams with recovery operations. MANTRA noted that the emergency measure does not automatically stop unbonding processes that were already in motion. Instead, impacted users must redelegate their tokens before the standard eight-day unbonding period elapses to stop the attackers from claiming the assets and moving them to external addresses.^[1][2]

Once a user redelegates, any subsequent unbonding attempts will be blocked under the active freeze. MANTRA stated that it plans to review the unbonding pause after seven days and has reserved the right to institute further freezes if necessary.^[1][2]