Web3Auth said it had transferred the affected Keplr wallets’ approximately 5600000 USD assets to recovery addresses
BIBIBI
AT A GLANCE
Web3Auth said it had transferred the affected Keplr wallets’ approximately 5600000 USD assets to recovery addresses; some wallets may have been stolen previously.
Article
Web3Auth has transferred Keplr approximately affected wallets’5600000 USD assets to recovery addresses
PANews November 9 reported, citing The Block, that Consensys-affiliated Web3Auth said that, due to a vulnerability in its service, the private keys of some Keplr wallets created through Google or Apple login were exposed, and that it transferred the funds in these wallets to secure addresses ahead of the attackers. On-chain data showed that the 12 recovery addresses it disclosed currently hold approximately 5600000 USD in crypto assets, including approximately 2490000 on Cosmos Hub,ATOM valued at approximately 3300000 USD。Web3Auth It also mentioned the “original attackers,” suggesting that some wallets had been stolen before recovery, but did not disclose the amount stolen.Keplr co-founder Josh Lee estimated that approximately 20%of Google and Apple login accounts were affected, but only a small portion were actually exploited.
PANews cited The Block as reporting that Web3Auth said a vulnerability in its service exposed the private keys of some Keplr wallets created through Google or Apple login.
02
Web3Auth said it transferred the funds in these wallets to secure addresses ahead of the attackers.
03
On-chain data showed that the Web3Auth disclosed 12 recovery addresses currently collectively hold approximately 5600000 USD in crypto assets.
04
The recovery addresses hold approximately 2490000 on Cosmos Hub,ATOM valued at approximately 3300000 USD。
05
Web3Auth mentioned the “original attackers,” but did not disclose the amount stolen.
06
Keplr Co-founder Josh Lee estimated that approximately 20%of Google and Apple login accounts were affected, while only a small portion were actually exploited.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is a wallet private-key exposure incident.Web3Auth said the vulnerability affected some Keplr wallets created using Google or Apple login and that it transferred the relevant funds to recovery addresses. The report also suggested that some wallets may already have been exploited before the transfer.
Why it matters to readers
Once private keys are exposed, attackers may control wallet assets. The recovery addresses contain approximately 5600000 USD in crypto assets, so affected users should monitor asset recovery and subsequent disposition arrangements.
If you have created a Keplr wallet using Google or Apple login, monitor information released by Web3Auth or Keplr on the scope of the impact, remediation, and asset recovery; do not operate the wallet based solely on unofficial information.
Risks and unknowns
The actual amount stolen was not disclosed.
The number of affected wallets and wallets actually exploited was not specified.
The approximately 20%affected proportion cited by Josh Lee is an estimate.
How the assets in the recovery addresses will be returned or disposed of has not been explained.
The provided materials do not include Web3Auth or Keplr the original announcement for independent verification.
Related Developments
Loading event timeline…
Related concepts
Private key
This term is not in the glossary yet. Browse related concepts in the glossary.
