According to The Block, Web3Auth said it moved funds from some vulnerable Keplr wallets ahead of attackers for safekeeping. At the time of publication, the 12 recovery addresses it disclosed held about $5.6 million in crypto assets in total. The incident originated from a flaw in Web3Auth and involved some Keplr wallets created using Google or Apple accounts. Keplr co-founder Josh Lee estimated that about 20% of Google and Apple login accounts were affected. Keplr said accounts created with a recovery phrase or a hardware wallet were not affected.