Web3Auth moved funds out of Keplr wallets: rescue or theft?
There’s an update on the Keplr social login incident. At 14:23 Beijing time on November 8, Web3Auth posted that, with Keplr’s assistance, it was moving assets from affected wallets into secure recovery wallets.
It also clarified that some transfers outsiders had mistaken for actions by the attacker were actually rescues. It then published a list of “verified recovery addresses” covering networks including Cosmos Hub, Osmosis, Celestia, Injective, and dYdX, plus one EVM address (said to cover eight chains), and said the list would continue to be updated. Keplr also reposted the notice, confirming that these were recovery addresses, not attacker addresses.
A few things to keep straight:
1. If your balance has been moved, first compare the destination address with the official list. Don’t assume you’ve been hacked based on a hunch.
2. Neither party has yet disclosed the number of affected wallets or the amount of losses. Don’t take figures circulating online as fact.
3. The official warning is to trust only official channels. Treat anyone who reaches out via DM offering to “help recover your assets” as a scammer.
CZ also reposted a reminder: anyone who has used a “social login” wallet should look into this carefully. Self-custody means taking responsibility yourself—including understanding who actually holds the keys.
#Keplr #钱包安全 #Web3Auth
There’s an update on the Keplr social login incident. At 14:23 Beijing time on November 8, Web3Auth posted that, with Keplr’s assistance, it was moving assets from affected wallets into secure recovery wallets.
It also clarified that some transfers outsiders had mistaken for actions by the attacker were actually rescues. It then published a list of “verified recovery addresses” covering networks including Cosmos Hub, Osmosis, Celestia, Injective, and dYdX, plus one EVM address (said to cover eight chains), and said the list would continue to be updated. Keplr also reposted the notice, confirming that these were recovery addresses, not attacker addresses.
A few things to keep straight:
1. If your balance has been moved, first compare the destination address with the official list. Don’t assume you’ve been hacked based on a hunch.
2. Neither party has yet disclosed the number of affected wallets or the amount of losses. Don’t take figures circulating online as fact.
3. The official warning is to trust only official channels. Treat anyone who reaches out via DM offering to “help recover your assets” as a scammer.
CZ also reposted a reminder: anyone who has used a “social login” wallet should look into this carefully. Self-custody means taking responsibility yourself—including understanding who actually holds the keys.
#Keplr #钱包安全 #Web3Auth
