Web3Auth backend vulnerability sweeps $3M across 19 chains without user signatures

An account claims a vulnerability hit Web3Auth's backend and the company ran a script that swept $3M across 19 chains without a single signature confirmation from any user device, despite marketing non-custodial MPC and user key ownership.

Detected & updated continuously · Source: Nebula