Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Read original article ↗AI Summary
A security flaw in Web3Auth's infrastructure was exploited to steal cryptocurrency from Keplr wallets that used Google or Apple sign-in methods. The breach led to a private key compromise, allowing attackers to access affected wallets. Web3Auth responded by proactively emptying at-risk wallets into secure recovery wallets across multiple blockchains to prevent further theft. While no official figures were released, security firm GoPlus estimated at least $1 million stolen, and blockchain analysis showed over $6 million moved to recovery wallets. The incident has impacted only wallets using social login; those using recovery phrases or hardware wallets are unaffected.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.