Keplr Wallet Security Incident Update: Users Advised to Move Remaining Assets, Private Keys of Some Social Login Accounts Compromised

Odaily Report: Keplr Wallet has released an update on the security incident. Users who logged in with Google or Apple should temporarily stop transferring new funds to the affected accounts and move any remaining transferable assets to accounts created via seed phrase or hardware wallet. Some affected accounts may show reduced or zero balances due to asset protection measures.

A vulnerability in Web3Auth infrastructure has led to the leakage of private keys for some users who logged in via Google or Apple social login. The team is currently assisting Web3Auth in taking measures to protect the assets of affected users, and the related remediation is still ongoing. Staked and locked assets may take longer to process due to added complexity. Users are also reminded to trust only information published by official Keplr and Web3Auth accounts, and to be wary of direct messages and links impersonating asset recovery services.