⚠️ Wallet security alert: Keplr, a wallet in the Cosmos ecosystem, announced an update on November 8 saying that a vulnerability in Web3Auth’s infrastructure exposed the private keys of some users who signed in with Google or Apple. Keplr has suspended Google and Apple sign-ins and warned affected users: do not transfer any more funds into the accounts in question, and move any remaining transferable assets to a recovery-phrase or hardware wallet account. Recovery-phrase and hardware wallet accounts are not affected.

On-chain analytics firm Bitquery tracked about $6 million in unusual transfers involving approximately 44,700 wallets. Web3Auth said some of the addresses belong to its white-hat rescue wallets, which are helping protect affected assets. The exact losses and compensation plan have not yet been announced.

If you created a Keplr wallet using social login, please check your account as soon as possible. Trust only official channels, and beware of messages and links from people impersonating customer support.

$BTC $ETH $ATOM