Community members began reporting that attackers were unstaking their OM without consent after first draining liquid balances. MANTRA suspended all new unbonding transactions for seven days while it contains an exploit tied to Web3Auth and Keplr wallets that exposed users' private keys.

Several wallets linked to the attackers have already been frozen through Governance Proposal 41. MANTRA is working with Web3Auth and Keplr on recovery.

The pause does not cover unbonding requests already in progress: users inside the 8-day unbonding window must redelegate before it ends, or attackers can claim and move the tokens.

MANTRA plans to reassess the freeze after seven days and may extend it or add further pauses depending on how the situation develops.