Keplr pauses Google and Apple login after unauthorized transfers

Keplr, a wallet widely used in the Cosmos ecosystem, has paused sign-in with Google and Apple after reports of unauthorized transactions on some accounts created that way. The wallet said so on X on Nov. 7 at about 2:38 AM ET.

Details

Keplr says it flagged the issue to the Web3Auth team and has been investigating with it since. According to PANews, Web3Auth reported a security issue affecting third-party platforms and temporarily suspended its embedded wallet service. Neither Keplr nor the outlets cited a loss amount or the number of victims.

Keplr's initial assessment is that wallets created with a recovery phrase or a hardware device are not affected. For social-login users it advises against sending new funds to those accounts, re-importing or recreating them elsewhere, and trusting any DMs or links offering "recovery": verified updates will come only from Keplr's own account. The Defiant reports the same.

What it means for the market

Social login is convenient for newcomers, but the key in such a wallet depends on a third-party service, so a fault there can hit several apps at once. Until a cause is published the scale is unknown; Keplr promises verified details and next steps. If you created an account with Google or Apple login, consider moving funds to a seed-phrase wallet without waiting for the outcome. This is not investment advice.

Prices are on the Cosmos page; the broader picture is in the daily brief.