Web3Auth Recovers $5.6 Million From Vulnerable Keplr…
By Abdelaziz Fathi
AI summary of the source article
Web3Auth moved approximately $5.6 million in cryptocurrency into secure recovery addresses after an infrastructure flaw exposed private keys in certain Keplr wallets. The firm is collaborating with Keplr to return the secured funds to affected users.
Why it matters
The incident demonstrates how a vulnerability in shared wallet infrastructure can affect multiple applications and thousands of accounts without compromising the underlying blockchain networks.
Key facts
- Web3Auth published 12 verified recovery addresses holding around $5.6 million to protect assets from vulnerable Keplr wallets.
- The vulnerability originated in Web3Auth's embedded-wallet infrastructure used for Google and Apple social logins.
- Keplr paused social-login functionality while working on a process to return the recovered assets.
Source excerpt · FinanceFeeds
Web3Auth has transferred cryptocurrency from vulnerable Keplr wallets into secure recovery addresses after a flaw in its embedded-wallet infrastructure exposed private keys belonging to some users who signed in through Google or Apple. The company published 12 verified recovery addresses on November 8 after blockchain investigators initially identified several of the same destinations as attacker-…