TokenPost topic
Wallet Security
122 TokenPost stories are tagged Wallet Security. The newest appear first.
Latest Wallet Security stories
- Web3Auth Moves At-Risk Wallet Assets Into Recovery Wallets
Some accounts created through Google or Apple sign-in faced unauthorized access. Web3Auth and Keplr are coordinating the return of transferred assets.
· Technology
- Web3Auth Restores Wallet Access as It Prepares Asset Returns
The company says affected assets remain in secure custody. SDK v9 and earlier have been deprecated.
· Technology
- Bitcoin’s Proof of Work Secures Its Ledger, Not Wallet Keys
Proof of work helps secure Bitcoin’s transaction history, while private keys authorize spending. Wallet and custodian security involve separate risks.
· Technology
- Unocoin Investigates BitGo Wallet Backup Mechanism as Services Remain Paused
The exchange is investigating potential asset losses and data exposure. Its platform services remain paused.
· Technology
- Tracked EVM Wallet-Drainer Phishing Cost Users $83.85 Million in 2025
The tally counted 106,106 victims, 68% fewer than in 2024. It also included 11 cases with losses of at least $1 million.
· Technology
- Binance Says Fake Hiring Scheme Enabled $6.34 Billion in Unauthorized Transfers
Jimmy Su said attackers used a malicious coding assignment to access an engineer’s work computer. Existing onchain authorizations remained active after Binance paused withdrawals.
· Technology
- LNbits Releases 1.7.0 Security Update, Warns All Older Versions Are Affected
The upgrade alone does not protect credentials that may already be exposed; LNbits recommends changing keys and migrating servers if compromise is suspected.
· Technology
- LNbits Releases Version 1.7.0 and Urges Wallet Operators to Update
LNbits says earlier versions are vulnerable and warns that an update alone will not protect credentials that have already been exposed.
· Technology
- Across Protocol Warns Users Away From App Amid Wallet Loss Reports
The protocol is investigating a possible domain security incident as users describe losses involving USDC and USDT0.
· Technology
- Across Says It Recovered Its Official Domain After a Hijacking
The cross-chain protocol says its systems are running normally and it will fully compensate users affected by the incident.
· Technology
- Binance Warns iOS Flaw Could Expose Wallet Recovery Phrases and Private Keys
The “worse_query” issue may let malicious apps read other apps’ local files on several iOS releases, putting stored wallet credentials at risk.
· Technology
- Polymarket Adds 48-Hour Wait for New Withdrawal Addresses
Users can restrict withdrawals to approved addresses and cancel an unauthorized address addition by email.
· Technology
- Avici Says Web3Auth Outage Disrupts Login for About 2% of Active Users
New registrations are paused, while card spending continues. Avici says it has detected no unauthorized transfers of user funds.
· Technology
- Keplr Pauses Google and Apple Logins After Wallet Security Breach
About 44,700 wallets sent funds to recovery addresses holding $6.01 million, a figure that does not confirm the attacker’s losses.
· Technology
- GoPlus Links Web3Auth Flaw to at Least $1 Million in Keplr Theft
About $6 million in assets was transferred to an official rescue address. The affected wallets used Google or Apple sign-in.
· Technology
- Web3Auth Recovery Addresses Received $6 Million From More Than 50,000 Keplr Wallets
The updated count spans 44,041 wallets on seven Cosmos chains and 7,603 on Injective; the amount taken by the original attacker has not been disclosed.
· Technology
- Keplr Suspends Social Logins After Unauthorized Wallet Activity; $6 Million in Transfers Later Linked to Recovery Wallets
Keplr and Web3Auth later identified the receiving addresses as recovery wallets, leaving the theft total unknown.
· Technology
- Web3Auth Moves $5.6 Million From Vulnerable Keplr Wallets
Twelve recovery addresses hold about 2.49 million Cosmos Hub tokens (ATOM), worth roughly $3.3 million; the amount stolen before the transfers remains undisclosed.
· Technology
- Electrum 4.8.4 Drops Incoming Lightning Onion Messages After a Flaw
The Nov. 6 release also repairs restoration for some pre-2.0 seed phrases that decode to odd-length hexadecimal strings.
· Technology
- Web3Auth Publishes Keplr Recovery Addresses to Clarify Asset Transfers
The list covers 11 named networks and EVM addresses spanning eight chains. Web3Auth plans to add more verified addresses.
· Technology
- Web3Auth Is Moving Keplr Incident Assets Into Recovery Wallets
Web3Auth is publishing verified recovery addresses and warned users to rely on official channels and watch for impersonation attempts.
· Technology
- Keplr Says Web3Auth Flaw Exposed Some Social Login Keys
Accounts created with a recovery phrase or hardware wallet were not affected. Keplr is working with Web3Auth to protect exposed assets.
· Technology
- Keplr Warns Some Social-Login Wallets Show Depleted Balances
The alert covers Google- and Apple-linked accounts. Keplr urges users to stop deposits and move any assets left.
· Technology
- About 2,266 Staked ATOM Moved From Six Cosmos Hub Accounts
One delegator reported theft, while Web3Auth characterized some apparent wallet drains as protective recovery transfers.
· Technology
- Keplr Urges Google and Apple Login Users to Move Liquid Assets
The warning applies to accounts created through Google or Apple sign-in. Keplr says a recovery effort may explain the empty balances.
· Technology
- Web3Auth Suspends Embedded Wallet Service During Security Probe
Keplr paused Google and Apple sign-ins while reviewing reports involving those accounts. Its initial assessment points to possible exposure through social login.
· Technology
- Keplr Pauses Google and Apple Wallet Logins After Transaction Reports
The wallet’s initial assessment says recovery-phrase and hardware-wallet accounts are unaffected. Social-login users are being told to stop sending funds.
· Technology
- Gnosis Pay Breach Exposes Full Card Details and Wallet Addresses
Exposed information included CVVs and home addresses. Gnosis Pay said it found no suspicious transactions or fund transfers.
· Technology
- Trail of Bits Urges Wallet Teams to Test Signing Controls
The cybersecurity firm outlined a four-step review to help teams assess what signing systems can approve.
· Technology
- Sanctum Adds 2-of-3 Multisignature Security Across Its Wallets
The company says one lost key will not lock users out and one leaked key will not be enough to compromise access.
· Technology
- Floki Suspends Bot Service as It Investigates Vulnerability Exploit
The team plans to move affected users to new secure wallets and transfer their remaining funds. Floki also told users with exported private keys to move any remaining balance.
· Technology
- Binance Probe Traces Wallet Breach to Compromised Tools and Credentials
Attackers used employee devices and an internal AI tool to reach signing infrastructure. Binance said affected systems were rebuilt and an independent review was commissioned.
· Technology
- Coinbase Says More Than 99% of Customer Assets Are in Cold Storage
A small share remains in hot wallets for withdrawals. Coinbase says its custody vault product is held entirely in cold storage.
· Technology
- Trust Wallet User Says 3,830 Tether (USDT) Left Wallet Without Approval
He said blockchain records showed a transfer, but his post did not identify the network, destination address or wallet version.
· Technology
- Binance Links Fake Job Interview to $6.34 Billion Security Incident
The exchange counted 57 suspected North Korea-linked threats stopped in 2026 but did not say whether any were connected to the engineer’s compromise.
· Technology
- Binance Details Engineer Intrusions Behind Incident Affecting $6.34 Billion in Assets
About $2.85 billion in assets was frozen or intercepted, while Binance had replenished 98% of affected token assets by Oct. 31.
· Technology
- Binance Traces Oct. 29 Theft to Compromised Engineer Computers
The attack timeline runs from a tampered Homebrew installer in June to unauthorized transfers through an internal wallet-signing service.
· Technology
- Binance Traces Wallet Attack to Fake Interview and AI Tool Abuse
Attackers used stolen credentials to reach the exchange’s internal wallet-signing service on Oct. 29.
· Technology
- OKX Star Details Four-Part Wallet Security Review After Binance Incident
The work includes tracking stolen funds with delays measured in seconds, strengthening market safeguards and checking risks tied to AI coding tools.
· Technology
- Ambire Ice Flags Safe Account Control Changes Before Hardware Signing
The device displays transfers, approvals and batched actions. Ambire’s first 200 units sold out, while the next 200 are listed for $159.
· Technology