Skip to content
Keplr Wallet Users Urged to Transfer Assets After Web3Auth Key Compromise

Keplr Wallet Users Urged to Transfer Assets After Web3Auth Key Compromise

First seen 8 Nov 2026, 00:17 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 04:17 UTC
  • •Keplr Wallet suspended Google and Apple login due to unauthorized transactions.
  • •A vulnerability in Web3Auth compromised private keys for affected accounts.
  • •Users are advised to transfer assets to secure wallets and avoid new deposits.

Keplr Wallet has suspended Google and Apple login functionalities following unauthorized cryptocurrency transfers reported by users on November 7, 2026. The incident is attributed to a vulnerability in Web3Auth, the third-party authentication provider, which compromised private keys for accounts created through social logins. Approximately 20% of these accounts may be affected, with initial loss estimates exceeding $700,000. Users are advised to stop depositing new funds and transfer assets to accounts created via mnemonic phrases or hardware wallets. Keplr and Web3Auth are currently investigating the breach and working on asset recovery measures. No confirmed figures on the total losses or affected accounts have been released yet. Users are cautioned against phishing attempts and advised to rely only on official communications from Keplr and Web3Auth.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-06
Keplr suspends Google and Apple login
Keplr Wallet disabled social login after reports of unauthorized transactions from affected accounts.
Cryptoticker
2026-11-07
Incident reported and investigation launched
Users reported unauthorized transfers; Keplr and Web3Auth began investigating the security incident.
Crypto Adventure
2026-11-08
Users advised to transfer assets
Keplr Wallet updated users to transfer assets to secure accounts and avoid depositing new funds.
Kucoin

More articles in this cluster (4)

Following this threat?

Track Keplr in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 2

Common questions

How do I know if my account is affected?
If you created your Keplr Wallet using Google or Apple login, your account may be at risk.
What should I do if I am affected?
Transfer any remaining assets to a wallet created with a recovery phrase or hardware wallet immediately.
Is there a timeline for recovery efforts?
Recovery efforts are ongoing, but staked or locked assets may take additional time to resolve.