A security incident has affected Keplr Wallet. In short: private keys for wallets created with one-click Google/Apple login may have been exposed.
According to an update from Keplr, the cause was a vulnerability in the infrastructure of third-party login provider Web3Auth. Accounts created with a seed phrase or hardware wallet are unaffected, and Google/Apple login has been suspended.
Three reminders:
1. If you created your account with social login, don’t deposit any more funds for now. Move any transferable assets to a seed phrase or hardware wallet;
2. A lower balance doesn’t necessarily mean you’ve been hacked. Some white hats are moving quickly to protect assets. Follow official announcements;
3. Don’t click on any private messages or links from people claiming they can “help you recover your assets.”
$ATOM
How did you create your wallet?
According to an update from Keplr, the cause was a vulnerability in the infrastructure of third-party login provider Web3Auth. Accounts created with a seed phrase or hardware wallet are unaffected, and Google/Apple login has been suspended.
Three reminders:
1. If you created your account with social login, don’t deposit any more funds for now. Move any transferable assets to a seed phrase or hardware wallet;
2. A lower balance doesn’t necessarily mean you’ve been hacked. Some white hats are moving quickly to protect assets. Follow official announcements;
3. Don’t click on any private messages or links from people claiming they can “help you recover your assets.”
$ATOM
How did you create your wallet?