Keplr Wallet advised users who sign in with Google or Apple to stop depositing funds into those accounts and move any remaining transferable assets to accounts created with a recovery phrase or hardware wallet. According to Odaily, a vulnerability in Web3Auth’s infrastructure exposed the private keys of some users who signed in through those social login options. Keplr said it is working with Web3Auth to protect affected users’ assets, and that some accounts may show reduced or zero balances because of protective measures. The response is ongoing, and staked or locked assets may take longer to address. Keplr also urged users to rely only on official Keplr and Web3Auth announcements and to be wary of messages and links impersonating asset recovery services.
