[Update 2] Our sincere apology for the simple wallet security incident
We are deeply and sincerely sorry for the distress and inconvenience caused by the unauthorized transfers from simple wallets on 24 October.
We will tell you exactly what happened without hiding anything, restore every loss exactly as promised, and carry out every step as quickly and precisely as we can.
Below is what we have done so far and what comes next.
- The cause has been fully identified and fixed, a full check found no further loss, and our police report has been accepted while the funds are traced.
- Weather data collection and WLBN reward accrual are normal, and rewards for the paused period will be paid with no change to the amounts.
- Lost assets will be returned in kind and in the same quantity as soon as accounts are recovered, including losses of liquidity providers.
- Accounts will reopen as soon as possible; claims will wait briefly and then be processed at once. Passkey sign-in is being added.
- We recommend moving rewards to an external wallet (Xaman, D'CENT, etc.). Liquidity pools will reopen once our review is complete.
- Beware of impersonators: Wellbian never asks for your seed or password, or for transfers or signatures in the name of rewards or recovery. Official updates come only from wellbian.io and no-reply@wellbian.io.
Our promise
First, we will share how the incident happened and how things are progressing, openly and without hiding anything.
Second, we will keep our recovery promise exactly as stated.
Third, we will carry out every follow-up measure as quickly and precisely as possible.
Where things stand
We quickly identified the authentication flaw behind the incident on the night of 24 October, fixed it completely and closed every attack path.
We checked every other simple wallet one by one and confirmed there was no further loss beyond the exposed wallets.
Our report to law enforcement has been accepted, and we are tracing the stolen funds together with partners in Korea and abroad.
Data collection and rewards are running normally
Weather and air-quality data from your devices continues to be collected normally; the incident did not affect it.
WLBN rewards keep accruing exactly as usual.
Rewards accrued while services are paused will be paid in full, with no change to the amounts.
Our recovery promise
We are identifying every loss you suffered in this incident, accurately and quickly.
Every asset you lost will be returned in kind and in the same quantity, restored the moment your account recovery is complete.
WLBN will be returned as WLBN, XRP as XRP and RLUSD as RLUSD.
NFTs held in exposed wallets (device licenses, AI passes and tiers) will be newly issued to your new wallet.
Members who supplied assets to the liquidity pools will have their losses restored as well.
Our entire team will do everything in its power, to the very end, so that no member is left with any loss at all.
Members with an exposed wallet have received an individual email with the details for their wallet.
Reopening your account
We will reopen sign-in, My Page and other account features as soon as possible.
Reward claims (payouts) will wait briefly for safety checks and then be processed in one go.
You will receive everything accrued in the meantime at once.
To strengthen security we are adding passkey sign-in.
You confirm it is you with your phone or computer's fingerprint, face recognition or screen lock, so even if a password or code is stolen, no one else can open your account.
How to protect yourself (recommended)
Please be especially careful of impersonators. Wellbian will never ask for your seed, password or verification code.
Any message asking you to send funds, sign a transaction or connect your wallet on another site in the name of rewards or recovery is an impersonation.
Official updates come only through notices on wellbian.io and email from no-reply@wellbian.io. Please report anything suspicious to admin@wellbianlabs.io.
After receiving rewards, we recommend moving them to an external wallet you control yourself (Xaman, D'CENT, etc.).
Keeping only what you need in the simple wallet is the safest approach.
Do not send any assets to an exposed wallet address.
Liquidity pools
We withdrew the liquidity pools as a protective measure to stop the attacker from selling any further.
They will reopen as soon as our review is complete, and we will announce the schedule separately.
We will keep you informed of the damage and our progress through site notices and personal emails.
Please send any questions at any time to admin@wellbianlabs.io.
Wellbian Labs Pte. Ltd.