Web3Auth security incident history
Hacking, data breaches and other security incidents involving Web3Auth, with related coverage.
Incidents: 1 · Most recent
Web3Auth security flaw compromises Keplr wallet private keys
Impact: Private keys compromised and assets stolen from some Keplr wallets; actual amount stolen undisclosed
A security flaw in Web3Auth's infrastructure compromised the private keys of some Keplr wallets created using Google or Apple accounts, resulting in unauthorized transactions. Web3Auth suspended its service and moved approximately $5.6 million to a recovery wallet to prevent further theft. The amount actually stolen by the attacker was not disclosed.
Related reports: 4 · last report →