In November 2026, attackers made unauthorized transactions from Keplr wallets created using Google or Apple social login, affecting accounts that relied on Web3Auth’s third-party authentication and key management infrastructure. Keplr and Web3Auth launched a joint investigation and suspended the affected login services. Wallets created using a recovery phrase or hardware wallet are believed to be unaffected. The exact vulnerability, total funds stolen, and affected blockchain networks remain undisclosed.