GoPlus: At least about $1 million in assets stolen in Keplr wallet security incident

深潮 TechFlow reported that on November 9, according to GoPlus monitoring, Keplr wallets were affected by a vulnerability in social login provider Web3Auth, causing some users' private keys to be leaked or their transaction signing capabilities to be compromised. At least about $1 million in assets were stolen, and about $6 million in assets were transferred to an officially confirmed rescue address.

GoPlus said the affected Keplr wallets were those created via Google or Apple sign-in, while accounts created using seed phrases or hardware wallets were not affected. 深潮 TechFlow previously reported that Web3Auth had published a recovery address and said that some transfers made to protect assets were mistaken for attacker activity.

Source: 深潮 TechFlow