keplr

⚠️ Security Alert | Some Keplr social login accounts have experienced unauthorized transactions, with the issue traced to Web3Auth

Web3Auth has officially confirmed a security issue affecting its services. Some third-party platforms have been impacted, and embedded wallet services have been suspended for now. Preliminary investigations indicate that MetaMask users have not been affected so far. Further details will be announced by the official team.

Keplr Wallet also issued a statement: it has received multiple reports of unauthorized transactions involving accounts created through Google or Apple login. The issue has been reported to the Web3Auth team, and both parties are investigating together.

See which of these three account types applies to you:
1️⃣ Keplr accounts created with a recovery phrase: preliminarily assessed as unaffected
2️⃣ Hardware wallet accounts: unaffected
3️⃣ Accounts created with Google/Apple social login: may be affected; check your account immediately

Urgent advice for affected users:
▪ Check your asset balances and transaction authorization history immediately, and revoke any unfamiliar contract approvals
▪ Transfer your assets as soon as possible to a newly created recovery-phrase wallet or a hardware wallet
▪ Follow announcements only through official channels. Never click “customer support recovery links” sent via direct message
▪ Never enter your recovery phrase or social account verification code on any webpage

The underlying issue is worth reflecting on: social login lowers the barrier to Web3, but actual control of the keys rests with third-party infrastructure. When an intermediary has a problem, users have almost no safety net. Convenience and security have always involved a trade-off.

For holding significant assets long term, a hardware wallet remains the safest choice. Remember the old saying: Not your keys, not your coins.

#Web3安全 #Keplr #WalletSecurity

【Security Alert】Web3Auth has suspended its embedded wallet service due to a security issue, and unauthorized transactions have been reported on some Keplr accounts using social login.

Here are the key facts:
1. The affected accounts were created with Keplr using Google or Apple sign-in. Accounts created with a recovery phrase or hardware wallet are preliminarily believed to be unaffected.
2. Web3Auth says some third-party platforms were affected and has urgently suspended its embedded wallet service. Initial investigations indicate that MetaMask users were not affected.
3. Keplr has reported the issue to Web3Auth and launched a joint investigation. The root cause and further details are pending an official announcement.

Three immediate recommendations for users:
- If you use a Keplr account created with social login, check your assets and authorization records immediately. If necessary, create a new recovery-phrase wallet and transfer your assets.
- Watch out for phishing messages and links from people impersonating official customer support. Rely only on official channels for announcements.
- This incident is another reminder: social login lowers the barrier to entry, but private key management depends on a third party, making its risk model very different from self-custody. For large holdings, consider using a recovery phrase with a hardware wallet.

Convenience and security always involve trade-offs. Await further official information on the root cause and remediation measures.

#Web3安全 #Keplr #Web3Auth

【Security Alert】Unauthorized transactions have been reported on some Keplr Wallet accounts using social login. The source of the risk points to Web3Auth, a provider of embedded wallet infrastructure.

Incident timeline:
1. Web3Auth officially confirmed a security issue affecting its services and has suspended its embedded wallet services. Some third-party platforms have been affected. Preliminary investigations found no impact on MetaMask users; further details will be announced by the company.
2. Keplr Wallet said it has received multiple reports of unauthorized transactions on accounts created by logging in with Google or Apple. The reports have been forwarded to the Web3Auth team, and the two parties are investigating jointly.
3. The scope of the impact is clearly defined: Keplr accounts created using a seed phrase or hardware wallet are not affected. Only accounts created through Google/Apple social login may be affected.

Affected users are advised to check their accounts immediately:
- Check account assets and recent authorization records, and stop signing any unfamiliar transactions;
- If you use a social login account, move your assets as soon as possible to a new address controlled by a seed phrase or hardware wallet;
- Beware of phishing links from people impersonating official support or offering airdrop compensation. Rely only on official announcements.

Social login lowers the barrier to using Web3, but relying on third-party infrastructure to manage private keys concentrates risk. This incident is another reminder that self-custody using a seed phrase or hardware wallet remains a safer choice for long-term asset storage.

#Web3安全 #Keplr #Web3Auth

Seeing reports about Keplr: Some accounts created using Google / Apple sign-in have had unauthorized transactions. Keplr is investigating with Web3Auth, and social login has been temporarily suspended.

Preliminary guidance: Keplr accounts created with a recovery phrase or hardware wallet do not appear to be affected for now. If you used social login, don’t deposit any more funds for now, and don’t import or recreate the account elsewhere. Web3Auth says its embedded wallet service has been temporarily suspended. So far, MetaMask users do not appear to be affected.

Social login is convenient, but when something goes wrong, it can put everyone at risk all at once. Fake support agents offering to “help you recover your account” will surely show up now—trust only official accounts.
#Keplr #Web3Auth #WalletSecurity

One-tap login goes wrong: Some Keplr accounts using Google/Apple compromised, social login urgently suspended.

It wasn’t a lost seed phrase—the “convenient login” shortcut was the first thing to blow up. Cosmos ecosystem wallet Keplr says it has received reports of unauthorized transactions on some accounts created using Google or Apple login, and is investigating with Web3Auth. Its preliminary assessment is that accounts created with a seed phrase or hardware wallet are unaffected. For now, Google/Apple login has been suspended. The team warns: don’t send funds to these accounts, don’t reimport or recreate them elsewhere, trust only official updates, and don’t trust DMs offering to “help you recover” your account.

Here’s the catch: social login is convenient, but the keys are held by a third-party embedded wallet service. Web3Auth has also suspended its embedded wallets and says it has so far seen no impact on MetaMask users. The convenience of one-tap login has come with a security bill this time.

This is not investment advice.
Sources: Keplr official · Web3Auth · PANews · The Defiant · 2026-11-07 HKT
#Keplr #Web3Auth #钱包安全 #加密安全 #HengB Media

Does anyone know how to tell if the COMOS network is unstable? I'm trying to withdraw $ATOM to a self-custody wallet via MB and Binance, but neither of them allowed it 🥲 #saque #Wallet #keplr #Cosmos #ATOM