A problem in Web3Auth’s systems has prompted transfers from some Keplr wallets, while Keplr says recovery work may explain why some users see empty balances.
Web3Auth said its infrastructure issue affected some embedded wallets used by Keplr. The company and its partners are moving assets from vulnerable wallets the attacker had not reached into recovery wallets. Keplr attributed exposure of some users’ private keys to the vulnerability and said those users had signed in with Google or Apple.
Keplr urged those users to stop adding funds and move any remaining liquid assets to an account created with a recovery phrase or hardware wallet. It said wallets created using either method were not affected.
The warning follows Keplr’s earlier suspension of Google and Apple wallet sign-ins amid reports of unauthorized transactions involving some accounts. Keplr said recovery work is continuing, and staked or locked assets may take longer to secure. Keplr and Web3Auth are preparing a check that would let users see whether their accounts were exposed.
