GoPlus: Keplr wallet suffers at least approximately $1 million in asset theft due to a vulnerability in social login service provider Web3Auth.

November 9th: GoPlus Chinese community confirmed in a post that the Keplr wallet, due to a vulnerability in the social login service provider Web3Auth, has led to the leakage of private keys or theft of transaction signing capabilities for some users, with at least approximately $1 million in assets stolen, and another approximately $6 million in assets transferred to an officially confirmed rescue address.

Yesterday's news: Keplr Wallet stated in a post that a vulnerability in Web3Auth infrastructure caused private key leaks for some Keplr users who logged in via Google or Apple. Users who created wallets using mnemonic phrases or hardware wallets are not affected.