PANews cited The Block as reporting that Web3Auth said it had transferred assets from some vulnerability-affected Keplr wallets to recovery addresses; the publicly disclosed 12 addresses collectively hold approximately 5600000 USD in assets. Some wallets may have been stolen before recovery, but the amount was not disclosed.
MYRIAD said an internal wallet’s private key had been leaked and the attacker manipulated the settlement of BNB Chain 10 AMM markets. The platform has revoked the permissions, recovered the relevant funds, and will automatically refund voided markets at prices from before the attack.
According to Scam Sniffer monitoring cited by BlockBeats, a user is suspected of losing approximately 1580000 USD, with the attacker transferring out 682 units of ETH, of which approximately 281 units were transferred into Tornado Cash。
Polkadot The community foundation warned that Fearless some versions of the browser extension may send private keys to an attacker-controlled server when a wallet is unlocked. 8 users reported suspected related unauthorized transactions involving 17,286 coins DOT。
PANews reported that eMudhra 8 intermediate CA certificates had private keys that could be cracked because of key-generation flaws, and Chrome and Firefox have revoked trust in the relevant certificates. Google said that, before the revocation, no associated CT certificates were found in TLS logs.
PANews cited monitoring by SlowMist Cosine, stating that Qubic Wallet may have leaked most private keys, and an attacker may be able to recover private keys through 6 connections.
BlockBeats stated that BNB Chain’s 79thVault hot wallet was allegedly attacked due to a private key leak, with the relevant address transferring out 79AU and cashing out approximately 12500000 USD。
PANews cited Scam Sniffer as saying that Duelbits’ hot wallets on Ethereum,BSC and Tron experienced abnormal transfers of approximately 4200000 USD in assets, with private key leakage suspected as the cause.