Keplr Wallet Security Incident: Users Advised to Transfer Assets Due to Private Key Leak

Odaily Planet Daily report: Keplr Wallet has issued an update on the security incident. Users who logged in with Google or Apple should temporarily stop depositing new funds into their associated accounts and transfer any remaining transferable assets to accounts created via mnemonic phrases or hardware wallets. Some affected accounts may already show reduced or zero balances due to asset protection measures.

Due to a vulnerability in the Web3Auth infrastructure, private keys of some users who logged in via Google or Apple social login were compromised. We are currently assisting the Web3Auth team in taking measures to protect the assets of affected users; the resolution process is ongoing, and staked or locked assets may require additional time due to their complexity. Additionally, users are reminded to trust only official communications from Keplr and Web3Auth, and to be cautious of direct messages and links impersonating asset recovery services.