Keplr Disables Social Logins After Unauthorized Transactions

Keplr disabled Google and Apple wallet logins after users reported unauthorized transactions in some accounts created through those services, while authentication provider Web3Auth suspended its embedded-wallet service as it responded to a security incident. The companies have not confirmed how many accounts were affected or how much cryptocurrency was irretrievably lost.

Keplr said the reports involved accounts using social logins and advised affected users not to deposit more assets. In a later update, it urged them to move any remaining liquid assets to wallets secured by a recovery phrase or hardware device. Keplr said accounts secured through those methods did not appear to be affected.

Web3Auth said it suspended its embedded-wallet service during its security response. Its initial investigation found no evidence that MetaMask users were affected. The companies have not published a technical explanation of the issue or a complete account of the assets involved.

Blockchain analytics firm Bitquery estimated that about $6.01 million in transfers involved roughly 44,700 distinct wallets. That figure describes observed on-chain movement, not a confirmed theft total. The estimate...