Skip to content

Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

  • by

​Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker.

Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week.

Web3Auth then used the attacker’s own route to empty other at-risk wallets before the attacker Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker.

Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a security flaw at that company to reach the wallets, both companies said late last week.

Web3Auth then used the attacker’s own route to empty other at-risk wallets before the attacker  The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *