GoPlus: At least $1 million worth of assets stolen in Keplr wallet security incident

According to TechFlow, on November 9, GoPlus monitoring revealed that due to a vulnerability in social login provider Web3Auth, some Keplr wallet users had their private keys leaked or their transaction signing capabilities stolen. At least approximately $1 million in assets were stolen, with an additional $6 million transferred to an officially confirmed recovery address.

GoPlus stated that only Keplr wallets created via Google or Apple login were affected, while accounts created using mnemonic phrases or hardware wallets remain unaffected. TechFlow previously reported that Web3Auth has published a recovery address, noting that some transactions intended to protect assets were mistakenly identified as attacker activity.