Keplr disabled wallet access through Google and Apple after reports of unauthorized transactions involving some accounts, while Web3Auth suspended its embedded wallet service over a security issue involving services used by some third parties.
Keplr’s preliminary assessment pointed to possible exposure among accounts created with Google or Apple. It said accounts secured by a recovery phrase or hardware wallet did not appear affected. Keplr initially advised potentially affected users not to add funds or restore those accounts through an import. In a later update, it told them to move any remaining liquid assets to an account secured by a recovery phrase or hardware wallet.
Web3Auth said its initial investigation found no evidence that MetaMask users were affected. It later published recovery addresses, but its updates did not establish a complete list of affected networks or tokens. As of Nov. 8, the companies had not announced a confirmed count of affected accounts or an estimate of losses.
