#Keplr建议社交登录用户转移资产
86% of wallets were drained only after the warning was issued
$AMZNB $TSMB
Keplr advises users who sign in with social accounts to move their assets. This is not a precautionary measure—it’s damage control after the fact.
On-chain data shows that attackers stole at least $6 million from more than 44,000 Keplr wallets accessed through Google/Apple sign-in, across 8 Cosmos chains. Keplr issued a warning on November 7 at 04:38 UTC, but the biggest wave of draining happened two hours after the warning—six times larger than the first wave. By wallet count, 86% of victims lost their funds only after seeing the warning.
The reason is simple: the private keys had already been compromised, and pausing the sign-in feature couldn’t stop those who already had the keys. “Pausing” protects accounts whose keys haven’t been compromised; it can’t protect those that have.
#Keplr #Web3安全 #Cosmos
86% of wallets were drained only after the warning was issued
$AMZNB $TSMB
Keplr advises users who sign in with social accounts to move their assets. This is not a precautionary measure—it’s damage control after the fact.
On-chain data shows that attackers stole at least $6 million from more than 44,000 Keplr wallets accessed through Google/Apple sign-in, across 8 Cosmos chains. Keplr issued a warning on November 7 at 04:38 UTC, but the biggest wave of draining happened two hours after the warning—six times larger than the first wave. By wallet count, 86% of victims lost their funds only after seeing the warning.
The reason is simple: the private keys had already been compromised, and pausing the sign-in feature couldn’t stop those who already had the keys. “Pausing” protects accounts whose keys haven’t been compromised; it can’t protect those that have.
#Keplr #Web3安全 #Cosmos