Web3Auth flaw exploited to steal Keplr crypto funds
Original title: Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Attacker used Web3Auth flaw to breach Keplr wallets; provider rescued funds from at-risk accounts.
Keplr wallet users who signed in with Google or Apple accounts were affected by a flaw at Web3Auth. The attacker gained private keys allowing theft of funds. Web3Auth emptied other at-risk wallets using their own route for safety and moved the money to recovery wallets. Keplr paused Google and Apple sign-in while investigating. No dollar figure for the theft has been confirmed.
Unconfirmed: Exact number of wallets affected and when the flaw was first used
- Private key breach for Google and Apple login accounts
- Web3Auth emptied other at-risk wallets
- Funds moved to recovery wallets on 11 Cosmos and 8 Ethereum-style chains
- 86% of wallets emptied after public warning
- Keplr paused embedded wallet service
Impact: Private key breach allowing fund theft
| Product | Affected | Fixed in |
|---|---|---|
| Web3Auth Keplr wallet | — | paused sign-in |
- 1.Do not send new funds to affected accounts
- 2.Do not re-import or recreate accounts
- 3.Move staked funds to recovery phrase or hardware wallet
- Vendors
- web3auth
- Products
- keplr wallet
From the original article
3 min read at thehackernews.com
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.