Keplr, a widely used wallet in the Cosmos ecosystem, has temporarily suspended Google and Apple logins after receiving reports of unauthorized transactions in some user wallets. The wallet said on November 7 that the affected accounts were created through social login, and that it is investigating the issue jointly with Web3Auth, the authentication provider behind the feature.
Web3Auth disclosed a security issue affecting some third-party platforms late on November 6 and temporarily suspended its embedded wallet services as a precaution. The company said its initial investigation found no evidence that MetaMask users were affected. Keplr's initial assessment likewise found that accounts created with a recovery phrase or a hardware wallet were not affected.
According to a statement attributed to Keplr co-founder Josh Lee, the incident originated at the provider rather than in Keplr's own code. Early estimates put the potentially affected group at about 20% of Google and Apple login accounts, with only a fraction of that group appearing to have been exploited. He also said remaining accounts may be recoverable. These are preliminary figures from the parties involved, not independently audited statistics.
Keplr advised users who may be affected not to send new funds to the accounts in question and not to re-import or recreate those accounts elsewhere while the investigation continues. The wallet also warned users to rely only on official channels for updates and to beware of direct messages or links claiming to offer asset recovery.
The incident highlights a structural risk in social-login wallets: convenience features that remove seed phrases from the user experience also concentrate trust in the authentication provider. When that layer is compromised, users who never shared a private key can still lose funds. The scope of the damage is still being established, and no verified total loss figure has been published by either party as of this writing.
The broader market showed little reaction, with Bitcoin and Ether spot prices on Binance roughly flat over the past 24 hours, suggesting traders currently treat the event as contained to the affected wallets.
This article is for informational purposes only and is not financial advice. Do your own research (DYOR) before making any investment decision.