Mishaboar, a member of the Dogecoin community, warned about social signing, which allows users to create and access a blockchain wallet using accounts such as Google, Apple ID, Telegram or email. Keplr reported unauthorized transactions on some accounts created with Google or Apple login and escalated the issue to Web3Auth. Web3Auth temporarily paused its embedded wallet service but found no evidence that MetaMask users had been affected. Mishaboar said the feature particularly exposes inexperienced crypto users because a compromise can reveal the holder’s real-world identity and assets. Separately, researchers identified two exploit kits, Coruna and DarkSword, targeting older iOS versions and enabling access to wallet data stored on a compromised device.
Source: Read the original article
