Web3Auth moves $5.6m from exposed Keplr wallets to frontrun hackers
Web3Auth secured $5.6 million after detecting a vulnerability in integrated Keplr wallets, while acknowledging an attacker had already taken an undisclosed sum.
Key takeaways
- 1Web3Auth moved $5.6 million out of vulnerable Keplr wallets to prevent exploiters from draining them.
- 2Web3Auth confirmed an original attacker managed to steal an undisclosed amount of funds before the emergency transfer.
Web3Auth moved $5.6 million out of exposed Keplr crypto wallets to prevent malicious actors from stealing the funds, the key management infrastructure provider said. The emergency asset transfer took place after the provider detected a security risk affecting integrated wallet accounts, allowing Web3Auth to move the capital before potential exploiters could drain it.
In communications discussing the incident, Web3Auth referred to an original attacker, confirming that some user funds were compromised before the emergency transfer took place. Web3Auth did not state the total amount stolen by the attacker or provide technical details explaining how the vulnerability occurred.
Web3Auth builds key management infrastructure designed to simplify user onboarding for Web3 applications. The service allows people to create and access wallet accounts using standard social login credentials rather than traditional seed phrases. Keplr is a self-custody wallet widely used to hold tokens and interact with decentralized applications built on the Cosmos blockchain network.
The incident shows the speed required from infrastructure providers when technical flaws put self-custody funds at risk. Wallet holders will watch for technical updates from Web3Auth explaining how the secured $5.6 million will be returned to owners, alongside details on any security updates to the protocol.
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.