News

Public · Published

Keplr Wallet Advises Social Login Users to Transfer Assets After Private Key Exposure

Keplr Wallet advised users who sign in with Google or Apple to stop depositing funds into those accounts and transfer remaining transferable assets to accounts created with a recovery phrase or hardware wallet. A vulnerability in Web3Auth's infrastructure exposed private keys for some social-login users; Keplr is working with Web3Auth, and staked or locked assets may take longer to address.

Published:

Updated:

What happened

Keplr Wallet advised users who sign in with Google or Apple to stop depositing funds into those accounts and transfer remaining transferable assets to accounts created with a recovery phrase or hardware wallet. A vulnerability in Web3Auth’s infrastructure exposed private keys for some social-login users; Keplr is working with Web3Auth, and staked or locked assets may take longer to address.

Confirmed

Global impact / market context

Exposed private keys can let someone control assets in affected accounts, creating a direct risk of loss and prompting users to move funds. The advice may also reduce deposits through social login, while the ongoing response and delays for locked assets leave some users facing uncertainty.

Analyst inference

The article describes a wallet-security incident involving Web3Auth infrastructure, not a reported change in Apple’s business or financial results. Apple is mentioned only as a sign-in option; the stated operational exposure concerns some Keplr users, with no wider financial impact specified.

Analyst inference

What to watch

  1. Keplr and Web3Auth updates may clarify which social-login accounts were affected and what protective measures mean for users seeing reduced or zero balances. Confirmed
  2. Users should follow the stated advice to stop depositing into social-login accounts and move transferable assets to recovery-phrase or hardware-wallet accounts. Confirmed
  3. Updates on staked or locked assets could show how long recovery takes; impersonation attempts could also exploit users seeking help and increase losses. Analyst inference

Evidence