Keplr: Balances in some social login accounts have been reduced or drained by a white-hat rescue; users are advised to transfer their remaining assets as soon as possible.

ME News reported on November 8 (UTC+8) that Cosmos ecosystem wallet Keplr Wallet tweeted that a vulnerability in Web3Auth’s infrastructure had exposed the private keys of some Keplr users who signed in with Google or Apple. Keplr is assisting Web3Auth in protecting the assets of affected users. Web3Auth previously said it had worked with partners on a white-hat rescue of vulnerable wallets that had not yet been attacked but were susceptible to the same attack path.

Keplr said that, as a result, some accounts created with Google or Apple sign-in may already show reduced or zero balances. Rescue efforts are ongoing, and staked and locked assets are more complex to handle and take longer to recover. Users who created accounts by signing in with Google or Apple should not transfer any more funds to those accounts and should move any remaining liquid assets to an account created with a seed phrase or hardware wallet. Accounts created with a seed phrase or hardware wallet are not affected. Keplr said it is working with Web3Auth to develop a way for users to check whether their accounts were affected, and urged users to trust only updates from official Keplr and Web3Auth accounts and to ignore direct messages or links claiming they can “recover assets.”

Foresight News previously reported that Web3Auth had suspended its embedded wallet service due to a security issue, and that some Keplr Wallet accounts created by signing in with Google or Apple had seen unauthorized transactions. (Source: Foresight News)