Keplr Wallet has advised users who set up accounts via social logins (Google or Apple) to transfer their remaining assets due to an upstream security breach involving Web3Auth.
Key Security Update:
The Root Cause: An infrastructure flaw at Web3Auth—the third-party provider powering Keplr's embedded social login features—exposed private keys, leading to unauthorized transactions.
Who is Affected: Only accounts created using Google or Apple sign-ins are impacted. Wallets secured by a traditional seed phrase (recovery phrase) or a hardware wallet are completely unaffected.
Action Required: Keplr and security teams have urged affected users to stop depositing new funds and to transfer any remaining transferable assets to a newly secured wallet managed via a direct seed phrase or hardware device.
White-Hat Interventions: Note that some asset reductions or balance movements may also be part of authorized white-hat rescue missions launched to protect funds from malicious actors.
Safety Warning: Avoid clicking on unverified links or responding to direct messages offering "wallet recovery" assistance, as scammers are actively targeting affected users. Always rely strictly on updates published via Keplr's official channels.

#keplr #BunanceSquareTalk