Web3Auth Moves Roughly $5.6 Million in Assets from Affected Wallets to Secure Addresses

Odaily: According to Web3Auth monitoring, Consensys-owned Web3Auth stated that a vulnerability in its service led to the leakage of private keys for some Keplr wallets created through Google or Apple login. Web3Auth moved funds from these wallets to secure addresses before attackers could do so. On-chain data shows that the 12 recovery addresses disclosed by Web3Auth currently hold approximately $5.6 million in crypto assets, including about 2.49 million ATOM on Cosmos Hub, worth roughly $3.3 million. Web3Auth mentioned the "original attacker," suggesting that some wallets had already been compromised before recovery, but it did not disclose the amount stolen. Keplr co-founder Josh Lee estimated that about 20% of Google and Apple login accounts were affected, but only a small portion of them were actually exploited.