GoPlus: At least about $1 million in assets stolen in the Keplr wallet security incident
Original headlineGoPlus：Keplr 钱包安全事件中至少约 100 万美元资产被盗
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
Keplr wallet users lost at least roughly $1 million in assets after a vulnerability in social-login provider Web3Auth exposed private keys or transaction-signing capability for wallets created via Google or Apple sign-in, according to GoPlus monitoring. About $6 million more in assets was moved to an official rescue address confirmed by the team. Accounts created with a seed phrase or hardware wallet were unaffected. Web3Auth has published a recovery address and said some transfers that protected assets were mistaken for attacker activity. The incident highlights third-party login risk in self-custody wallets; next, watch the recovery process and whether affected users are made whole.
Muhabbit's AI wrote this summary in its own words from TechFlow's report and translated it from Chinese. It can get details wrong, so check the source.
Named in this story
Keplr, Web3Auth, GoPlus