Web3Auth flaw drains Keplr wallets and triggers mass recovery transfers
Some Keplr crypto wallets created with Google or Apple sign-in lost money after an attacker used a flaw in Web3Auth, the login provider behind that sign-in flow. Web3Auth and Keplr both said late last week that the issue touched wallets inside the Keplr app, while some other wallets were emptied by Web3Auth and moved into recovery wallets before an attacker could reach them. Affected Wallets And Recovery Moves Wallets created…