Keplr Pauses Google and Apple Logins After Wallet Security Breach

Keplr paused Google and Apple sign-ins Nov. 6 after some accounts recorded unauthorized transactions; Web3Auth identified an infrastructure issue affecting wallets created through those logins. Keplr tied the incident to a private-key breach linked to Web3Auth’s infrastructure. Keplr said the incident did not affect wallets secured with recovery phrases or hardware devices. Keplr told users with affected accounts not to deposit funds or reimport the wallets, and to move remaining liquid assets to a wallet protected by a recovery phrase or hardware device. At least 44,041 wallets across seven Cosmos chains and an estimated 7,603 on Injective sent funds to two addresses. After accounting for overlap, the estimate was about 44,700 unique wallets. Web3Auth later identified the addresses as recovery wallets.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to TokenPost.