Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety

A security flaw in Web3Auth was exploited by an attacker to steal funds from Keplr crypto wallets set up using Google or Apple accounts. The vulnerability allowed the attacker to access the wallets through Web3Auth, which handles the sign-in process for Keplr. Both Keplr and Web3Auth confirmed the incident late last week. In response, Web3Auth used the same exploit route to proactively empty other wallets that were at risk, preventing further potential theft. This action was taken to protect the affected wallets from the attacker. The incident resulted in financial losses for some Keplr users who had set up their wallets using Google or Apple accounts.