Key Highlights MANTRA has suspended new token unbonding transactions for seven days. The action follows an exploit involving Web3Auth and Keplr wallets that exposed users’ private keys. Attackers accessed users’ liquid MANTRA holdings and unbonded staked tokens without authorization. MANTRA Suspends Token Unbonding After Wallet Exploit MANTRA has temporarily suspended new token unbonding transactions for ...
Key Highlights: A security vulnerability involving third-party infrastructure provider Web3Auth compromised Keplr wallets created via Google and Apple social logins, leading to over $6 million in traced losses across tens of thousands of wallets. Cosmos Hub suffered the heaviest impact with roughly $3.5 million drained, including about 1.96 million staked ATOM transferred without observing the ...
Key Highlights Keplr Wallet disabled Google and Apple social logins after an issue with third-party provider Web3Auth triggered unauthorized transactions starting around November 6. On-chain tracking indicates an estimated $6 million outflow across more than 44,000 Cosmos and roughly 7,600 Injective addresses, though Web3Auth has contested this total figure. Standard seed-phrase Keplr accounts, alongside Trust ...
Key Highlights: A security vulnerability in Web3Auth’s infrastructure compromised thousands of Keplr social-login wallets across Cosmos and Injective, while standard seed phrase and hardware wallets remained entirely unaffected. Blockchain tracking firm Bitquery identified over 51,000 impacted addresses across the Cosmos and Injective networks, whereas initial external theft estimates reached $6.01 million. Web3Auth has strongly contested ...
Key Highlights: Attackers drained at least $6 million from over 44,000 wallets across eight Cosmos ecosystem networks, according to blockchain analytics firm Bitquery. Web3Auth suspended its embedded wallet service to recover vulnerable assets, while Keplr advised users against depositing into compromised accounts. Major wallet providers MetaMask and Trust Wallet reported no affected users, and there ...
Key Highlights: A 27-message batch transaction executed on November 7 utilized the Cosmos Hub Liquid Staking Module (LSM) to transfer staked $ATOM across multiple accounts without the standard 21-day unbonding period. The on-chain activity follows a disclosed Web3Auth infrastructure security vulnerability that exposed private keys for certain Keplr users accessing wallets via Google or Apple ...