BitKeep, warned that users’ private keys are still at risk after a security incident on Dec. 26 led to over $13 million in losses at the time of publication. BitKeep is one of the more popular noncustodial, decentralized finance multichain wallets with over 6 million users.
Como urged users who had already downloaded the Android APK 7.2.9. to transfer their digital assets to a new wallet. “It is probable that [these wallets] already had their private keys leaked,” the crypto executive wrote.
In terms of progress, Como explained that the BitKeep team has already been in contact with blockchain security firms, such as SlowMist, to trace the stolen funds. “We have actively collected information about users’ stolen assets, made a complete recollection of hacking procedures and timeline, and have collected evidence of the Android 7.2.9 APK malware.
Web3 data analytics firm OKLink first reported yesterday that the attacker set up several fake BitKeep websites that contained an APK file that looked like version 7.2.9 of the BitKeep wallet. Users who downloaded and interacted with the malicious file then had their private keys or seed words stolen and sent to the attacker.
