This situation raises serious concerns about wallet security. It's big to know if your keys are safe or compromised.
Keplr wallet users face potential key compromise after security incident
On November 7, Keplr reported unauthorized transactions on accounts created using Google or Apple logins. This prompted a pause in those login methods after Web3Auth identified a security issue in its infrastructure affecting certain wallets. While the pause raises concerns about access, it also shows a more serious issue: some users' private keys may have been compromised.
Web3Auth's notice indicates that the security incident occurred on November 6, leading to a maintenance window that has not confirmed service restoration. Keplr's updated security documentation notes that Google-login accounts receive a hexadecimal private key instead of a recovery phrase, which is stored locally on the user's device. However, the status of these keys during the current incident remains uncertain.
Keplr has advised users with potentially affected accounts not to send new funds and to move their remaining assets to accounts secured with recovery phrases or hardware wallets. This guidance aims to protect users while the investigation continues into the breach affecting some social-login accounts.
For traders and crypto users, this incident shows the importance of knowing the security status of your private keys. It also emphasizes the need for secure recovery options, especially when using social logins. As the situation develops, monitoring updates from Web3Auth and Keplr will be big to ensure asset safety.
#Security #Wallet #CryptoNews
Keplr wallet users face potential key compromise after security incident
On November 7, Keplr reported unauthorized transactions on accounts created using Google or Apple logins. This prompted a pause in those login methods after Web3Auth identified a security issue in its infrastructure affecting certain wallets. While the pause raises concerns about access, it also shows a more serious issue: some users' private keys may have been compromised.
Web3Auth's notice indicates that the security incident occurred on November 6, leading to a maintenance window that has not confirmed service restoration. Keplr's updated security documentation notes that Google-login accounts receive a hexadecimal private key instead of a recovery phrase, which is stored locally on the user's device. However, the status of these keys during the current incident remains uncertain.
Keplr has advised users with potentially affected accounts not to send new funds and to move their remaining assets to accounts secured with recovery phrases or hardware wallets. This guidance aims to protect users while the investigation continues into the breach affecting some social-login accounts.
For traders and crypto users, this incident shows the importance of knowing the security status of your private keys. It also emphasizes the need for secure recovery options, especially when using social logins. As the situation develops, monitoring updates from Web3Auth and Keplr will be big to ensure asset safety.
#Security #Wallet #CryptoNews
