Keplr advises social login users to transfer remaining liquid assets.

On November 8, according to an official announcement from Keplr Wallet, a vulnerability in the Web3Auth infrastructure led to the leak of private keys for some Keplr users who logged in using Google or Apple. Keplr is currently assisting in securing the assets of affected users.

Keplr advises social login users not to transfer new funds to the affected accounts and to move any remaining liquid assets to accounts created with a mnemonic phrase or hardware wallet. Asset protection measures are still underway, and the processing of staked and locked assets may take longer; some account balance reductions or wipes may be related to these protective measures.

Keplr stated that it is collaborating with Web3Auth to determine how users can check if their accounts have been affected. Accounts created using a mnemonic phrase or hardware wallet remain unaffected.