Keplr Wallet Suspends Google and Apple Login After Reports of Unauthorized Transactions
Multichain cryptocurrency wallet Keplr has temporarily suspended Google and Apple login services following reports of unauthorized transactions affecting some accounts created through those authentication methods. The company announced on November 6 that it was investigating the security issue alongside wallet infrastructure provider Web3Auth.
Keplr warned that users who registered through Google or Apple authentication could be exposed to the incident. However, its preliminary assessment indicated that accounts created using traditional recovery phrases or hardware wallets were not affected.
The wallet provider has advised potentially affected users to avoid depositing additional funds, refrain from re-importing or recreating their accounts, and rely exclusively on official communications while the investigation continues.
Keplr Wallet Warns Google and Apple Login Users
In its November 6 security statement, Keplr identified accounts established through Google and Apple login as the group potentially affected by the unauthorized transactions.
"If you created your Keplr account with Google or Apple login, your account may be affected," Keplr said.
The company issued specific instructions intended to help users avoid further exposure while investigators examine the incident. Users with potentially affected accounts were told to stop transferring new funds into those wallets and avoid attempting to restore, re-import, or recreate the accounts through other services.
Keplr also cautioned users against responding to unsolicited direct messages or following links claiming to offer wallet recovery assistance. The company directed users to its official X account for verified security updates and instructions.
The warning applies specifically to accounts created through the affected social login methods, rather than all Keplr wallets.
Web3Auth Infrastructure Under Investigation
The distinction between account creation methods is significant because Keplr uses different approaches to wallet authentication and private key management.
According to Keplr's security documentation, accounts created through Google login rely on Web3Auth technology to generate a private key instead of using a conventional 12-word or 24-word recovery phrase.
The documentation states that the generated private key is encrypted and stored locally on the user's device.
Keplr is working with Web3Auth to investigate the reported unauthorized transactions, although neither company has publicly established the underlying cause of the security issue.
Keplr's initial findings indicated that users who established their wallets using recovery phrases or hardware wallets were not affected by the incident. That assessment remains preliminary while the investigation continues.
Web3Auth Temporarily Suspends Embedded Wallet Service
Web3Auth separately acknowledged the security problem in a November 6 statement, confirming that an issue had affected its services used by certain third-party applications.
The wallet infrastructure provider said it had temporarily paused its embedded wallet service in response. The service allows applications to integrate cryptocurrency wallet functionality directly into their platforms.
The suspension represents a separate precautionary measure from Keplr's decision to disable Google and Apple login.
Web3Auth also addressed potential concerns involving MetaMask, stating that its initial investigation had not identified evidence of an impact on MetaMask users.
"After an initial investigation, we've found no evidence that MetaMask users are impacted," Web3Auth said.
The statement did not establish the full scope of the incident across other applications using Web3Auth infrastructure.
Cause and Financial Impact Remain Unconfirmed
Neither Keplr nor Web3Auth disclosed how the unauthorized transactions occurred. The companies also did not provide an estimate of financial losses or identify the number of accounts potentially compromised.
As a result, the scale of the incident remains unclear, including whether the reported activity was limited to a small number of wallets or involved a broader group of users relying on the affected authentication services.
Keplr said it would publish verified findings and further instructions through its official X account as the investigation progresses.
Until additional information becomes available, the company's guidance remains focused on preventing new deposits into potentially affected accounts and avoiding unauthorized recovery services.
source: thedefiant
Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.