Web3Auth flaw exploited to drain Keplr wallets, companies say
Some Keplr wallets set up with Google or Apple sign-in have had funds stolen by an attacker who used a security flaw at Web3Auth, which provides that sign-in.
Written by a model from the sources below. Verify against them.
- Kind
- Vulnerability
- Vendor
- Web3Auth
- Product
- Keplr wallet Google and Apple sign-in
- Status
- Reported, not confirmed
- First seen
Summary
Some Keplr wallets set up with Google or Apple sign-in have had funds stolen by an attacker who used a security flaw at Web3Auth, which provides that sign-in. Keplr and Web3Auth both said late last week that the flaw was exploited, and Web3Auth moved funds from other at-risk wallets to protect them.
What to do
Check Keplr wallets linked to Google or Apple sign-in for unauthorized transactions.
Move remaining funds to a wallet you control with a seed phrase or hardware key, if you are able to do so safely.
Follow official guidance from Keplr and Web3Auth before reconnecting social sign-in.
Be wary of unsolicited messages offering recovery help or claiming to be from either company.
Timeline
- Made public by The Hacker News
- First seen by cve.now
Evidence 1
- PressThe Hacker News
“The attacker used a security flaw at that company to reach the wallets, both companies said late last week.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about SZB-ea46f00bd9
Has Web3Auth confirmed it?
The Hacker News reports it. No statement from Web3Auth has reached cve.now yet.Source: The Hacker News
What should Web3Auth users do?
Check Keplr wallets linked to Google or Apple sign-in for unauthorized transactions. Move remaining funds to a wallet you control with a seed phrase or hardware key, if you are able to do so safely. Follow official guidance from Keplr and Web3Auth before reconnecting social sign-in. Be wary of unsolicited messages offering recovery help or claiming to be from either company.