MANTRA Chain remains offline after security exploit, restart delayed pending patch test

MANTRA Chain halts operations after security breach

MANTRA Chain, a blockchain network, has kept its mainnet offline since August 21 after an attacker exploited a vulnerability in an upstream software dependency. Transactions, transfers, and staking services remain unavailable while the team works on a fix.

The halt was a precautionary measure to prevent further damage. MANTRA stated that user funds were not affected by the pause itself, but the full impact of the attacker’s actions is still being assessed.

Key details of the incident

• An attacker exploited a vulnerability in an upstream dependency, a piece of software that MANTRA relies on.
• The network was paused to prevent further damage, stopping all transactions and staking.
• A patched software version (v8.4.0) is being tested on the DuKong testnet before a mainnet restart.
• Validators must wait for a coordinated restart announcement to bring the network back online.
• The team took a snapshot of the network state before the halt to ensure data integrity.

What the team is doing to fix the issue

MANTRA released a software patch (version 8.4.0) to address the vulnerability. The patch is currently undergoing testing on DuKong, a test version of the network. Once testing is complete, validators will need to upgrade their nodes before the mainnet can restart.

The team emphasized that validators should not restart their nodes independently. A coordinated restart is required to ensure the network returns smoothly. The restart was initially targeted for August 21, but this depends on successful testing.

What is confirmed and what remains unclear

Confirmed:

• The network is offline due to an exploit in an upstream dependency.
• Transactions, transfers, and staking are paused.
• User funds were not affected by the halt itself.
• A software patch (v8.4.0) has been released and is being tested.
• A network state snapshot was taken before the halt.

Unclear:

• The full impact of the attacker’s actions on assets remains under review.
• The exact timeline for the mainnet restart depends on the patch testing results.
• Whether any funds were moved or stolen by the attacker is still being investigated.

Why this matters for MANTRA users

While the network is offline, users cannot perform transactions, stake assets, or move funds on MANTRA Chain. Some exchanges have also paused deposits and withdrawals for MANTRA’s token. The team stated that users do not need to take any action at this time.

The incident highlights the risks of vulnerabilities in blockchain software dependencies. A successful patch and coordinated restart will be necessary to restore normal operations.

Sources

• CryptoSlate