GetChain News
中简 中繁 EN
GetChain News
Toggle sidebar

Online/Update

News linked to both this project and an event.

Web3Auth Discloses Keplr Asset Recovery Addresses, Clarifies Transfers Not Made by Attackers

Odaily reports: Web3Auth posted an update on X regarding the asset recovery progress of the Keplr wallet security incident. The team, with Keplr's assistance, is transferring assets from affected wallets to secure recovery wallets. As some recovery transfers were mistaken for attacker activity, Web3Auth has disclosed verified recovery wallet addresses, covering networks including Cosmos Hub, Osmosis, Celestia, Akash, Noble, Injective, dYdX, Babylon, Axelar, Saga, Agoric, as well as EVM addresses spanning 8 chains.Web3Auth added that these addresses are all used for the secure transfer of affected assets and are not wallets controlled by attackers. More verified addresses will be updated subsequently. Users are reminded to follow official channel announcements and to be vigilant against scams impersonating official personnel and fraudulent asset recovery requests.

Keplr Wallet Security Incident Update: Users Advised to Move Remaining Assets, Private Keys of Some Social Login Accounts Compromised

Odaily Report: Keplr Wallet has released an update on the security incident. Users who logged in with Google or Apple should temporarily stop transferring new funds to the affected accounts and move any remaining transferable assets to accounts created via seed phrase or hardware wallet. Some affected accounts may show reduced or zero balances due to asset protection measures.A vulnerability in Web3Auth infrastructure has led to the leakage of private keys for some users who logged in via Google or Apple social login. The team is currently assisting Web3Auth in taking measures to protect the assets of affected users, and the related remediation is still ongoing. Staked and locked assets may take longer to process due to added complexity. Users are also reminded to trust only information published by official Keplr and Web3Auth accounts, and to be wary of direct messages and links impersonating asset recovery services.