MANTRA Pauses Unstaking for 7 Days After Keplr Security Incident; Ongoing Unstakes Must Be Redelegated

MANTRA will suspend all unstaking transactions for seven days following a security incident involving Web3Auth and Keplr, and users with unstaking in progress must redelegate their tokens. According to Foresight News, the pause will be reviewed when the seven-day period ends, and MANTRA may extend it. The incident involved leaked private keys that allowed hackers to steal users’ unstaked MANTRA tokens and initiate unstaking of staked tokens without their consent. The suspension does not affect unstaking already in progress; affected users must redelegate before the eight-day unstaking period ends to prevent hackers from claiming the tokens and transferring them to addresses users cannot control. After redelegation, further unstaking will be paused during the freeze. MANTRA previously froze several hacker wallets through Governance Proposal No. 41. The private-key leak stemmed from a vulnerability in Web3Auth infrastructure and affected some Keplr wallets in the Cosmos ecosystem whose users logged in through Google or Apple.