A vulnerability in the Web3Auth infrastructure exposed the private keys of some Keplr users or allowed their transaction-signing capabilities to be stolen. At least approximately $1 million in assets was stolen, while another approximately $6 million was transferred to an officially confirmed rescue address. According to Odaily Planet Daily, GoPlus monitoring found that affected users include those who log in to Keplr using Google or Apple; users who created wallets with a recovery phrase or hardware wallet are not affected.

Self-check: If you have authorized the relevant contracts, check and revoke those authorizations as soon as possible.

#安全事件