Keplr Wallet: Some social login account private keys have been leaked, it is recommended to transfer remaining assets

Keplr Wallet announced that a vulnerability in the Web3Auth infrastructure has led to the leakage of private keys for some Keplr users who logged in via Google or Apple. Users who created wallets using mnemonic phrases or hardware wallets are not affected.

Keplr is assisting Web3Auth in protecting the assets of affected users, and related work is ongoing. The handling of staked and locked assets is more complex and will take longer. Some Google or Apple login accounts may show reduced or empty balances due to the aforementioned risk mitigation measures.

Keplr reminds users who created accounts via Google or Apple login that they may be affected and should stop transferring new funds to the related accounts, and transfer any remaining liquid assets to accounts created with mnemonic phrases or hardware wallets. Both parties are exploring methods for users to check if their accounts are affected. Users should only trust updates from the official accounts of Keplr and Web3Auth, and ignore private messages and links claiming to "recover assets."