Now Hacked
EN-GB
Data breach

Keplr social-login wallet keys exposed, assets stolen

First reported · Last reported · 7 related reports

SpilloverSpillover from the Web3Auth incident · View original incident →

A security flaw in Web3Auth infrastructure exposed the private keys of some Keplr wallets created using Google or Apple login and led to unauthorised asset transfers. Keplr suspended these login options, while Web3Auth moved assets from at-risk wallets to recovery wallets. The approximately $6.01 million in transferred assets included protective transactions, and on 13 November, theft losses of at least KRW 2.4 billion were reported.

Key facts

Affected organisation
Keplr
Original incident
Web3Auth security flaw compromises Keplr wallet private keys
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
At least KRW 2.4 billion in cryptoassets stolen
Cause / method
A security flaw in Web3Auth infrastructure exposed private keys for social-login wallets
Location
Other countries

If your data was exposed

Exposed dataCrypto assets

  1. Check login and withdrawal history in your exchange app, and turn on withdrawal address whitelisting and withdrawal delays.

Timeline

  1. The exposure of private keys for some Keplr wallets and the suspension of Google and Apple login were reported.
  2. Reports of approximately $6.01 million in asset transfers were corrected to describe protective transfers to recovery wallets designated by the provider.
  3. Assets from at-risk wallets were moved to recovery wallets; official loss figures and the number of accounts were not disclosed.
  4. The theft of at least KRW 2.4 billion from social-login cryptoasset wallets was reported.

Original incident

This is spillover from the Web3Auth incident.

  • Data breachWeb3AuthKnock-on victims: 1

    Web3Auth security flaw compromises Keplr wallet private keys

    Impact: Private keys compromised and assets stolen from some Keplr wallets; actual amount stolen undisclosed

    A security flaw in Web3Auth's infrastructure compromised the private keys of some Keplr wallets created using Google or Apple accounts, resulting in unauthorised transactions. Web3Auth suspended its service and moved approximately $5.6 million to a recovery wallet to prevent further theft. The amount actually stolen by the attacker was not disclosed.

    Related reports: 4 · last report →

7 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.