Keplr pauses social logins after unauthorized transactions hit Google and Apple accounts
Keplr Wallet has suspended Google and Apple logins following reports of unauthorized transactions linked to a security issue at embedded wallet provider Web3Auth, with on-chain data tracing approximately $6 million in suspected theft.
Keplr Wallet has halted Google and Apple login options after users reported unauthorized transactions draining funds from accounts created via social logins. The team confirmed that wallets generated with a standard recovery phrase or backed by a hardware wallet remain unaffected by the incident.[1][4][8][9][11]
The vulnerability originated at Web3Auth, an authentication and embedded wallet service owned by Consensys, which temporarily paused its services and entered maintenance mode. Blockchain data firm Bitquery traced $6.01 million in suspected theft tied to the security breach, which exposed private keys for certain Keplr wallets relying on third-party logins.[2][3][7][10][11]
A Keplr co-founder estimated that roughly 20% of its Google and Apple login accounts were affected, though only a fraction had been exploited and the rest might be recoverable. Keplr advised users to move remaining funds immediately to wallets secured by recovery phrases or hardware devices, warning that importing compromised keys into another app leaves them exposed. Account holders were also told not to deposit new funds and to ignore direct messages offering recovery help. Web3Auth stated that its initial review found no evidence that MetaMask users were impacted.[5][6][9][10][11]
Key facts
- Keplr Wallet paused Google and Apple login options after reports of unauthorized transactions on accounts set up using social logins.
- Wallets created using a seed recovery phrase or a hardware wallet were not affected.
- The incident stemmed from Web3Auth, which temporarily placed its embedded wallet service into maintenance mode due to a security issue.
- Bitquery traced $6.01 million in suspected theft connected to exposed private keys from affected Keplr wallets.
- Keplr's co-founder estimated that about 20% of wallets using Google and Apple logins were affected, with only a fraction exploited.
- Keplr urged affected users to transfer assets to recovery-phrase or hardware wallets and not to send new funds or re-import the keys elsewhere.
- Web3Auth stated that an initial investigation found no evidence that MetaMask users were impacted.
Sources · 9 sources
- TW
The Wolf Of All Streets@scottmelkerPost on X ·
KEPLR PAUSES GOOGLE AND APPLE LOGIN AFTER UNAUTHORIZED TRANSACTIONS ON SOME SOCIAL-LOGIN ACCOUNTS https://t.co/sgthDZvRDM
Open source - CB
Crypto BriefingArticle ·
Bitquery traces $6.01M theft to Keplr wallets created with Google and Apple logins The incident highlights the risks of relying on third-party social logins for crypto wallets, emphasizing the need for robust security measures. The post Bitquery traces $6.01M theft to Keplr wallets created with Google and Apple logins appeared first on Crypto Briefing .
Open source - CB
Crypto BriefingArticle ·
Web3Auth pauses embedded wallet service after security issue, Keplr users hit The incident highlights the vulnerability of centralized dependencies in decentralized ecosystems, urging a reevaluation of security protocols. The post Web3Auth pauses embedded wallet service after security issue, Keplr users hit appeared first on Crypto Briefing .
Open source - DN
DEGEN NEWS@DegenerateNewsPost on X ·
NEW: @keplrwallet REPORTS "UNAUTHORIZED TRANSACTIONS" ON SOME GOOGLE/APPLE LOGIN ACCOUNTS, PAUSES SOCIAL LOGIN RECOVERY PHRASE AND HARDWARE WALLETS "NOT AFFECTED" FOLLOWS @Web3Auth PAUSING ITS EMBEDDED WALLET SERVICE OVER A "SECURITY ISSUE" https://t.co/aSLxIv29Ke
Open source - CR
CryptoSlate@CryptoSlatePost on X ·
Keplr reported a key breach affecting some Google- and Apple-login wallets. @keplrwallet urged affected users to move available assets to recovery-phrase or hardware-wallet accounts. Importing the same key elsewhere leaves it exposed. via @akibablade https://t.co/vcW6jGULam
Open source - SI
Solid Intel 📡@solidintel_xPost on X ·
INTEL: About 20% of Keplr wallets using Google and Apple logins affected, co-founder estimates
Open source - CO
Cointelegraph@CointelegraphPost on X ·
🚨 ALERT: Keplr Wallet reports unauthorized transactions affecting some accounts created through Google or Apple login, as it investigates a Web3Auth security issue. https://t.co/8tZ8SPxMq7
Open source - CN
crypto.news@cryptodotnewsPost on X ·
BREAKING: Keplr Wallet pauses Google and Apple wallet logins after reports of unauthorized transactions The issue possibly affects accounts created through social logins, while recovery phrase and hardware wallet users are reportedly unaffected. https://t.co/zJowEGIswj
Open source - DE
Decrypt@DecryptMediaPost on X ·
Keplr Pauses Google and Apple Logins After Unauthorized Transactions. Keplr said Saturday it paused Google and Apple logins after reports of unauthorized transactions, advising potentially affected account holders not to add funds while it investigates with Web3Auth. https://t.co/SYS5bpuWBS
Open source - CB
Coin Bureau@coinbureauPost on X ·
⚠️WARNING: Bitquery traced $6.01 MILLION in suspected theft after a Web3Auth breach exposed private keys for some Keplr wallets. Keplr paused Google and Apple logins and says some wallets created using either sign-in may be affected. Wallets created with a recovery phrase or hardware device were unaffected, Keplr says. If you created your wallet with Google or Apple, Keplr urges you to move any funds you can withdraw to a wallet secured by a recovery phrase or hardware device. Don’t send new funds to the old wallet, and ignore DMs offering recovery. The investigation is ongoing. The confirmed loss total remains unknown.
Open source - CB
Coin Bureau@coinbureauPost on X ·
⚠️ALERT: Crypto wallets created with Google or Apple logins are being hit by unauthorized transactions. Keplr, the main wallet of the Cosmos ecosystem, paused both login options after users reported the thefts. The incident originated at Web3Auth, the login service owned by MetaMask's parent Consensys, which says it has gone into "maintenance mode due to a security incident." Web3Auth claimed nearly 50 MILLION users across more than 8,200 apps when Consensys bought it last year, per The Block. Keplr's co-founder estimates about 20% of its Google and Apple login accounts are affected, but says only "a fraction" of those has been exploited and the rest "may be recoverable." Wallets created with a recovery phrase or hardware wallet are NOT affected, and Web3Auth says there is no evidence MetaMask users are impacted.
Open source