Six million dollars from Keplr wallets evacuated by Web3Auth

On Friday, users of the Keplr wallet reported suspicious transactions related to a vulnerability in the Web3Auth infrastructure. On Saturday, Bitquery analysts revealed that over 44,000 wallets had been drained, with the value of transfers exceeding 6 million dollars. Eight addresses were identified as the recipients of the stolen funds. On Sunday, Web3Auth announced that it had moved 5.6 million dollars from the compromised wallets before the hackers could drain them. All eight addresses flagged by Bitquery were placed on a watchlist. Web3Auth confirmed that it acted to protect the funds but acknowledged that there was also a real attacker involved. The scale of the losses remains unknown. Keplr customers are warned not to deposit funds into accounts created by Google or Apple and to transfer assets to new wallets secured with their own recovery phrase.