Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

Some Keplr crypto wallet users who signed up with a Google or Apple account have had funds stolen. Keplr and Web3Auth both said late last week that an attacker used a security flaw at Web3Auth to reach the wallets.

Keplr uses Web3Auth to run the Google and Apple sign-in for its wallets.

According to the report, Web3Auth then used the attacker's own route to empty other at-risk wallets before the attacker could do so.