Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
· thehackernews.com · popularity 20/100 · 0 similar stories today · Crypto, Blockchain & Digital Assets (Money, Markets & Investing)
Read the original at thehackernews.com →
Summary
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week. Web3Auth then used the attacker's own route to empty other at-risk wallets before the attacker
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 3.