[Update 1] Simple wallet security incident and temporary service pause
Update 1 (24 October): From 21:06 KST on Saturday 24 October, WLBN, XRP and RLUSD were transferred without authorization from the simple wallets of some members who signed up with Google or email. To protect your assets we paused simple-wallet sign-in and unlock, claims, NFT issuance and payments. Members who connect with an external wallet (Xaman, D'CENT, etc.) are not affected.
Scope
90 simple wallets created with Google or email sign-up were exposed. We have emailed each affected member with the details of their wallet.
Members using an external wallet (Xaman, D'CENT, etc.) or an ID-and-password simple wallet are not affected.
Company operating wallets are safe, and your unpaid rewards are held safely in our ledger.
What we have done
Right after the incident we paused wallet sign-in, payments, claims and reward accrual, and closed the attack path.
We withdrew the WLBN liquidity pools so the attacker's funds could not be traded against company liquidity. WLBN trading may therefore be limited for now.
We are reporting the case to law enforcement and pursuing the tracing and freezing of the attacker's funds.
Please note
If you received an individual notice, do not send any assets to that simple wallet.
Wellbian will never ask for your seed, password or verification code. Anyone asking for them in the name of compensation or recovery is an impersonator.
We will announce the service restart schedule and how losses will be addressed as soon as they are decided.
Contact: admin@wellbianlabs.io
Wellbian Labs Pte. Ltd.