GoPlus: At least approximately 1 million USD in assets were stolen in the Keplr wallet security incident

According to GoPlus monitoring, the Keplr wallet has experienced a vulnerability in the social login service provider Web3Auth, resulting in the leakage of some users' private keys or the theft of transaction signing capabilities, with at least approximately 1 million dollars in assets stolen, and another approximately 6 million dollars in assets transferred to an officially confirmed rescue address.

GoPlus stated that the affected Keplr wallets were those created using Google or Apple login, while accounts created using mnemonic phrases or hardware wallets were not affected. Web3Auth has announced a recovery address and stated that some transfers protecting assets were mistakenly identified as attacker activities.