If you created your Keplr wallet with a Google or Apple login, move your funds now. Web3Auth, the service behind those logins, had a flaw that exposed private keys. Keplr says about 20% of those accounts were affected. Web3Auth managed to move $5.6M into recovery wallets before the attackers got there, including around 2.5M ATOM. GoPlus thinks at least $1M was actually stolen. If you use a seed phrase or a hardware wallet, you're fine. I get why people use social logins. But every login button means someone else is involved in holding your key. This weekend that someone got exploited.
CitoShare


Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.