Unauthorized Transactions Reported in Some Keplr Wallet Accounts Created via Social Login

November 7: Web3Auth stated that its service experienced a security issue that affected some third-party platforms. The embedded wallet service has currently been suspended. It also said the preliminary investigation found no MetaMask users affected. Further details will be announced by the official team later.

In addition, Keplr Wallet stated that it has received reports of unauthorized transactions in some accounts created via Google or Apple login, and has reported this to the Web3Auth team; the two sides are jointly investigating. According to the preliminary assessment, Keplr accounts created using a seed phrase or hardware wallet are not affected. Accounts created via Google/Apple login may be affected. Keplr Wallet reminded users that during the investigation, they should not transfer new funds into such accounts, and should not re-import or re-create such accounts anywhere else. The Google/Apple login feature has currently been suspended.