Keplr Wallet and Web3Auth Investigate Account Impact Query Method, Advise Some Social Login Users to Transfer Remaining Assets

According to Keplr Wallet monitoring, a Web3Auth infrastructure vulnerability has led to the leakage of private keys for some Keplr users who logged in via Google or Apple. Users who created wallets using seed phrases or hardware wallets are not affected. Keplr is assisting Web3Auth in protecting the assets of affected users, and the related work is still ongoing; handling staked and locked assets is more complex and requires more time. Some Google or Apple login accounts may show reduced or zero balances due to risk mitigation measures. Keplr reminds users who created accounts via Google or Apple login to stop transferring new funds into the affected accounts and to move remaining liquid assets to accounts created using seed phrases or hardware wallets. Keplr and Web3Auth are working on a method for users to check whether their accounts are affected, and remind users to trust only updates from both parties' official accounts, ignoring direct messages and links claiming to be able to recover assets.