🚨 Keplr Wallet: Web3Auth Flaw Hits Social-Login Accounts
A security flaw in Web3Auth, the service behind Keplr’s Google and Apple sign-in, has put some wallets at risk. Keplr paused those logins on Nov 6 after users reported unauthorized transactions.
🔹 Bitquery traced about $6M in transfers across 44,000+ wallets on Cosmos networks. This includes both theft and defensive moves
🔹 Web3Auth says it moved about $5.6M from at-risk wallets into 12 recovery addresses
🔹 Keplr’s co-founder estimates up to 20% of social-login accounts could be exposed
🔹 Accounts made with a recovery phrase or a hardware wallet appear unaffected
🔹 No reimbursement plan has been announced yet
✅ If you use Keplr social login: don’t add new funds, and move assets to a wallet you control with a recovery phrase. Never click “support recovery links” sent by DM.
Do you use social-login wallets? 👇
#crypto #CryptoNews #Keplr #Web3Auth #Cosmos #Security
Sources: The Block, The Hacker News
$BTC