Web3Auth Flaw Exploited: Crypto Users Face Losses
Keplr crypto wallet holders have fallen victim to a security flaw in the authentication service Web3Auth, resulting in stolen funds.
The Hacker News
Some users who linked their Keplr crypto wallet with Google or Apple account have experienced monetary losses due to an attack. Keplr utilizes the services of Web3Auth for the Google and Apple sign-in process. The attacker exploited a security vulnerability within Web3Auth, allowing unauthorized access to the wallets.
Web3Auth Uses Vendor's Route to Mitigate Risk
Following the security breach, Web3Auth leveraged the attacker's own method to empty other potentially compromised wallets before the attacker.
Keplr Wallet Holders Urged to Review Transactions
- Keplr wallet holders are advised to review their transaction history for any suspicious activities.
- Users are advised to change their passwords and two-factor authentication details as a precautionary measure.
- Keplr and Web3Auth have pledged to cooperate with law enforcement to track down the perpetrator and recover the stolen funds.
Web3Auth Issues Statement
Web3Auth has issued a statement acknowledging the incident and assuring users that the flaw has been patched.
The company has also confirmed that no user data has been compromised during the attack.
Keplr Addresses the Issue
Keplr, the cryptocurrency platform affected by the security breach, has taken immediate action to address the issue.
The company has advised users to change their passwords and two-factor authentication details.
Keplr and Web3Auth are working together with law enforcement agencies to trace the perpetrator and recover the stolen funds.
</body> </html><small>Source: The Hacker News — read the original story there.</small>
