Web3Auth pauses its embedded wallet service over a security issue; Keplr confirms unauthorized transactions on some Google/Apple-login wallets
- If your Keplr (or other dApp) wallet was created via Google/Apple social login: do not deposit new funds to it until the provider says it is safe; if you still control it, move assets to a wallet whose seed phrase or hardware key you hold.
- Seed-phrase and hardware-wallet users are reported unaffected.
- Expect phishing: ignore DMs or sites offering 'recovery' — use only official Keplr / Web3Auth channels.
- Builders: any app that integrates Web3Auth embedded wallets should check its own status and user comms; the blast radius beyond Keplr has not been stated.
Sources: Web3Auth on X: security issue, embedded wallet service paused (Nov 6) · Keplr Wallet on X: unauthorized transactions on some Google/Apple-login accounts (Nov 6)