🚨 Security Alert | Keplr Wallet Security Incident Update: Users Advised to Transfer Remaining Assets; Private Keys of Some Social Login Accounts Leaked
Odaily Planet Daily reports that Keplr Wallet has issued an update on the security incident. Users who signed in with Google or Apple should temporarily stop transferring new funds to the affected accounts and move any remaining transferable assets to accounts created using a recovery phrase or hardware wallet. Some affected accounts may already show reduced or zero balances due to asset protection measures.
A vulnerability in the Web3Auth infrastructure caused the private keys of some users who signed in with Google or Apple to be leaked. Keplr is assisting the Web3Auth team in taking measures to protect affected users' assets, and the response is ongoing. Staked and locked assets may take longer to process due to their complexity. Users are also reminded to trust only information published by official Keplr and Web3Auth accounts, and to beware of private messages and links impersonating asset recovery services.
Security check: If you have authorized the relevant contracts, check and revoke those authorizations as soon as possible.
#安全事件
Odaily Planet Daily reports that Keplr Wallet has issued an update on the security incident. Users who signed in with Google or Apple should temporarily stop transferring new funds to the affected accounts and move any remaining transferable assets to accounts created using a recovery phrase or hardware wallet. Some affected accounts may already show reduced or zero balances due to asset protection measures.
A vulnerability in the Web3Auth infrastructure caused the private keys of some users who signed in with Google or Apple to be leaked. Keplr is assisting the Web3Auth team in taking measures to protect affected users' assets, and the response is ongoing. Staked and locked assets may take longer to process due to their complexity. Users are also reminded to trust only information published by official Keplr and Web3Auth accounts, and to beware of private messages and links impersonating asset recovery services.
Security check: If you have authorized the relevant contracts, check and revoke those authorizations as soon as possible.
#安全事件