Web3Auth restored wallet access for existing users after a security issue affected some embedded wallets, while assets moved for protection remain in recovery wallets as the company and Keplr coordinate their return.
In a Nov. 13 update, Web3Auth said assets it and Keplr moved from wallets they considered at immediate risk remain in secure custody. The companies are coordinating the return process, and Web3Auth expects to share details in the coming days. It has not given a date for returning the funds.
The infrastructure issue affected some embedded wallets linked to Google or Apple sign-ins, including Torus Wallet and wallets used by third-party apps such as Keplr. Web3Auth has published a directory of verified recovery addresses for destinations used in the recovery effort.
Existing account holders can use Web3Auth’s Plug & Play and Single Factor Auth (SFA) services to sign in. The company has deprecated SDK v9 and earlier versions; developers should use v10 or v11 for supported SDK versions.
New SFA registrations remain restricted. On Sapphire networks, developers can restore them by moving to the latest Web3Auth SDK. The company plans to enable new registrations on Legacy networks by Nov. 23. Web3Auth also urged users to keep recovery information private and ignore unsolicited messages offering asset recovery.
