web3auth

10,684 views
28 Discussing
陈小萌
·
--
Over $6 million drained from at least 44,000 wallets using Google login ▫️Keplr confirmed unauthorized transfers from accounts signed in with Google or Apple; the issue lies with the social login service Web3Auth ▫️On-chain data shows at least 44,000 wallets affected, with about $6.01 million involved; the funds have not yet been transferred out ▫️Even after the official warning, 86% of the victims’ wallets were still drained ▫️The attackers also bypassed the 21-day unbonding period and withdrew about 1.96 million staked ATOM Accounts using seed phrases or hardware wallets don’t appear to have been affected so far; these two social login options have been suspended One-click login is convenient, but you may not actually hold the keys Will you still feel comfortable logging into your wallet with a social account? 👇 (Not investment advice) #Keplr #Web3Auth #WalletSecurity
Over $6 million drained from at least 44,000 wallets using Google login
▫️Keplr confirmed unauthorized transfers from accounts signed in with Google or Apple; the issue lies with the social login service Web3Auth
▫️On-chain data shows at least 44,000 wallets affected, with about $6.01 million involved; the funds have not yet been transferred out
▫️Even after the official warning, 86% of the victims’ wallets were still drained
▫️The attackers also bypassed the 21-day unbonding period and withdrew about 1.96 million staked ATOM
Accounts using seed phrases or hardware wallets don’t appear to have been affected so far; these two social login options have been suspended
One-click login is convenient, but you may not actually hold the keys
Will you still feel comfortable logging into your wallet with a social account? 👇 (Not investment advice)
#Keplr #Web3Auth #WalletSecurity
·
--
Recovery phrases are safe; ‘one-click sign-in’ is not: Keplr suspends Google and Apple sign-insWallets that took the easy route and signed in with Google or Apple got hit first this time. On November 6, Web3Auth, which provides embedded wallets and social sign-in, said its service had a security issue and that it had temporarily disabled embedded wallets. It had initially found no evidence that MetaMask users were affected. On November 7, it added that the issue was with Web3Auth’s infrastructure and affected some embedded wallets used by Keplr. On the same day, Keplr, a wallet commonly used in Cosmos, officially posted that some accounts signed in with Google or Apple had experienced unauthorized transactions, and that it was working with Web3Auth to investigate. The team’s initial assessment was that accounts created with a recovery phrase or hardware wallet were unaffected; Google and Apple sign-ins have been suspended for now. It urged affected users not to add funds to these accounts or reimport their wallets or recreate them elsewhere.

Recovery phrases are safe; ‘one-click sign-in’ is not: Keplr suspends Google and Apple sign-ins

Wallets that took the easy route and signed in with Google or Apple got hit first this time.
On November 6, Web3Auth, which provides embedded wallets and social sign-in, said its service had a security issue and that it had temporarily disabled embedded wallets. It had initially found no evidence that MetaMask users were affected. On November 7, it added that the issue was with Web3Auth’s infrastructure and affected some embedded wallets used by Keplr.
On the same day, Keplr, a wallet commonly used in Cosmos, officially posted that some accounts signed in with Google or Apple had experienced unauthorized transactions, and that it was working with Web3Auth to investigate. The team’s initial assessment was that accounts created with a recovery phrase or hardware wallet were unaffected; Google and Apple sign-ins have been suspended for now. It urged affected users not to add funds to these accounts or reimport their wallets or recreate them elsewhere.
GOOGUS+1.10%
買不起比特幣只能買比特犬:
所有熱錢包都不要用,並移除所有㽞覽器插件
【Google-login wallets were stolen! Keplr shuts down social logins overnight】 On November 7, Keplr, a popular Cosmos wallet, suspended Google and Apple logins: assets were transferred without authorization from some wallets created using social accounts. The issue involved Web3Auth, the third party responsible for social logins. Wallets using a recovery phrase or hardware wallet are unaffected. Don’t deposit funds into these kinds of accounts, and anyone who privately messages you claiming they can “help recover” your funds is a scammer. $ATOM $OSMO #Keplr #Web3Auth #WalletSecurity
【Google-login wallets were stolen! Keplr shuts down social logins overnight】
On November 7, Keplr, a popular Cosmos wallet, suspended Google and Apple logins: assets were transferred without authorization from some wallets created using social accounts. The issue involved Web3Auth, the third party responsible for social logins. Wallets using a recovery phrase or hardware wallet are unaffected. Don’t deposit funds into these kinds of accounts, and anyone who privately messages you claiming they can “help recover” your funds is a scammer.
$ATOM $OSMO
#Keplr #Web3Auth #WalletSecurity
【Security Alert】Web3Auth has suspended its embedded wallet service due to a security issue, and unauthorized transactions have been reported on some Keplr accounts using social login. Here are the key facts: 1. The affected accounts were created with Keplr using Google or Apple sign-in. Accounts created with a recovery phrase or hardware wallet are preliminarily believed to be unaffected. 2. Web3Auth says some third-party platforms were affected and has urgently suspended its embedded wallet service. Initial investigations indicate that MetaMask users were not affected. 3. Keplr has reported the issue to Web3Auth and launched a joint investigation. The root cause and further details are pending an official announcement. Three immediate recommendations for users: - If you use a Keplr account created with social login, check your assets and authorization records immediately. If necessary, create a new recovery-phrase wallet and transfer your assets. - Watch out for phishing messages and links from people impersonating official customer support. Rely only on official channels for announcements. - This incident is another reminder: social login lowers the barrier to entry, but private key management depends on a third party, making its risk model very different from self-custody. For large holdings, consider using a recovery phrase with a hardware wallet. Convenience and security always involve trade-offs. Await further official information on the root cause and remediation measures. #Web3安全 #Keplr #Web3Auth
【Security Alert】Web3Auth has suspended its embedded wallet service due to a security issue, and unauthorized transactions have been reported on some Keplr accounts using social login.

Here are the key facts:
1. The affected accounts were created with Keplr using Google or Apple sign-in. Accounts created with a recovery phrase or hardware wallet are preliminarily believed to be unaffected.
2. Web3Auth says some third-party platforms were affected and has urgently suspended its embedded wallet service. Initial investigations indicate that MetaMask users were not affected.
3. Keplr has reported the issue to Web3Auth and launched a joint investigation. The root cause and further details are pending an official announcement.

Three immediate recommendations for users:
- If you use a Keplr account created with social login, check your assets and authorization records immediately. If necessary, create a new recovery-phrase wallet and transfer your assets.
- Watch out for phishing messages and links from people impersonating official customer support. Rely only on official channels for announcements.
- This incident is another reminder: social login lowers the barrier to entry, but private key management depends on a third party, making its risk model very different from self-custody. For large holdings, consider using a recovery phrase with a hardware wallet.

Convenience and security always involve trade-offs. Await further official information on the root cause and remediation measures.

#Web3安全 #Keplr #Web3Auth
【Security Alert】Unauthorized transactions have been reported on some Keplr Wallet accounts using social login. The source of the risk points to Web3Auth, a provider of embedded wallet infrastructure. Incident timeline: 1. Web3Auth officially confirmed a security issue affecting its services and has suspended its embedded wallet services. Some third-party platforms have been affected. Preliminary investigations found no impact on MetaMask users; further details will be announced by the company. 2. Keplr Wallet said it has received multiple reports of unauthorized transactions on accounts created by logging in with Google or Apple. The reports have been forwarded to the Web3Auth team, and the two parties are investigating jointly. 3. The scope of the impact is clearly defined: Keplr accounts created using a seed phrase or hardware wallet are not affected. Only accounts created through Google/Apple social login may be affected. Affected users are advised to check their accounts immediately: - Check account assets and recent authorization records, and stop signing any unfamiliar transactions; - If you use a social login account, move your assets as soon as possible to a new address controlled by a seed phrase or hardware wallet; - Beware of phishing links from people impersonating official support or offering airdrop compensation. Rely only on official announcements. Social login lowers the barrier to using Web3, but relying on third-party infrastructure to manage private keys concentrates risk. This incident is another reminder that self-custody using a seed phrase or hardware wallet remains a safer choice for long-term asset storage. #Web3安全 #Keplr #Web3Auth
【Security Alert】Unauthorized transactions have been reported on some Keplr Wallet accounts using social login. The source of the risk points to Web3Auth, a provider of embedded wallet infrastructure.

Incident timeline:
1. Web3Auth officially confirmed a security issue affecting its services and has suspended its embedded wallet services. Some third-party platforms have been affected. Preliminary investigations found no impact on MetaMask users; further details will be announced by the company.
2. Keplr Wallet said it has received multiple reports of unauthorized transactions on accounts created by logging in with Google or Apple. The reports have been forwarded to the Web3Auth team, and the two parties are investigating jointly.
3. The scope of the impact is clearly defined: Keplr accounts created using a seed phrase or hardware wallet are not affected. Only accounts created through Google/Apple social login may be affected.

Affected users are advised to check their accounts immediately:
- Check account assets and recent authorization records, and stop signing any unfamiliar transactions;
- If you use a social login account, move your assets as soon as possible to a new address controlled by a seed phrase or hardware wallet;
- Beware of phishing links from people impersonating official support or offering airdrop compensation. Rely only on official announcements.

Social login lowers the barrier to using Web3, but relying on third-party infrastructure to manage private keys concentrates risk. This incident is another reminder that self-custody using a seed phrase or hardware wallet remains a safer choice for long-term asset storage.

#Web3安全 #Keplr #Web3Auth
Seeing reports about Keplr: Some accounts created using Google / Apple sign-in have had unauthorized transactions. Keplr is investigating with Web3Auth, and social login has been temporarily suspended. Preliminary guidance: Keplr accounts created with a recovery phrase or hardware wallet do not appear to be affected for now. If you used social login, don’t deposit any more funds for now, and don’t import or recreate the account elsewhere. Web3Auth says its embedded wallet service has been temporarily suspended. So far, MetaMask users do not appear to be affected. Social login is convenient, but when something goes wrong, it can put everyone at risk all at once. Fake support agents offering to “help you recover your account” will surely show up now—trust only official accounts. #Keplr #Web3Auth #WalletSecurity
Seeing reports about Keplr: Some accounts created using Google / Apple sign-in have had unauthorized transactions. Keplr is investigating with Web3Auth, and social login has been temporarily suspended.

Preliminary guidance: Keplr accounts created with a recovery phrase or hardware wallet do not appear to be affected for now. If you used social login, don’t deposit any more funds for now, and don’t import or recreate the account elsewhere. Web3Auth says its embedded wallet service has been temporarily suspended. So far, MetaMask users do not appear to be affected.

Social login is convenient, but when something goes wrong, it can put everyone at risk all at once. Fake support agents offering to “help you recover your account” will surely show up now—trust only official accounts.
#Keplr #Web3Auth #WalletSecurity
AAPL-0.22%
GOOGUS+1.10%
#KeplrAdvisesSocialLoginUsersToTransferAssets 🚨 Keplr just dropped an urgent update: a Web3Auth vulnerability leaked private keys for some users who logged in with Google or Apple. If you used social login, stop sending any new funds right now and move your remaining liquid assets to a wallet created with a seed phrase or hardware wallet. Mnemonic & hardware users are completely safe. Staked/locked assets may take longer to process, and some balances looking low or empty could be protective measures by the team. This is another harsh reminder that convenience often comes at a security cost. Social logins feel easy, but true self-custody still means holding your own keys. Always prioritize seed phrases or hardware wallets for any serious funds. Stay vigilant, only trust official Keplr & Web3Auth channels, and never click recovery DMs. Protect your bags first — the rest can wait. Stay safe out there! 🛡️ #Keplr #Web3Auth #CryptoSecurity #Cosmos
#KeplrAdvisesSocialLoginUsersToTransferAssets
🚨 Keplr just dropped an urgent update: a Web3Auth vulnerability leaked private keys for some users who logged in with Google or Apple.
If you used social login, stop sending any new funds right now and move your remaining liquid assets to a wallet created with a seed phrase or hardware wallet. Mnemonic & hardware users are completely safe. Staked/locked assets may take longer to process, and some balances looking low or empty could be protective measures by the team.
This is another harsh reminder that convenience often comes at a security cost. Social logins feel easy, but true self-custody still means holding your own keys. Always prioritize seed phrases or hardware wallets for any serious funds. Stay vigilant, only trust official Keplr & Web3Auth channels, and never click recovery DMs. Protect your bags first — the rest can wait. Stay safe out there! 🛡️

#Keplr #Web3Auth #CryptoSecurity #Cosmos
#keplradvisessocialloginuserstotransferassets 🚨 KEPLR WARNS USERS: TRANSFER YOUR CRYPTO ASSETS! ⚠️🔐 A major security concern has emerged for Keplr Wallet users after a vulnerability in Web3Auth infrastructure reportedly exposed private keys linked to some Google and Apple login accounts. 🔴 Key Developments: ⚠️ Some Google and Apple login wallets may be affected. 🔐 Private keys of certain social-login users were exposed. 💰 Users are advised not to deposit additional funds into potentially affected accounts. 📤 Move remaining liquid assets to wallets secured with a recovery phrase or hardware wallet, following Keplr's official instructions. 🛡️ Recovery and protection efforts are ongoing with Web3Auth. Important Security Reminder: Users with recovery-phrase or hardware wallets are currently assessed as unaffected. 🚨 Beware of fake recovery links and scammers. Never share your seed phrase or private keys with anyone. Is this a warning sign for social-login crypto wallets? 🤔 #Keplr #CryptoSecurity #Web3Auth #CryptoNews $BTC $ETH $BNB {spot}(BNBUSDT) {spot}(ETHUSDT) {spot}(BTCUSDT)
#keplradvisessocialloginuserstotransferassets
🚨 KEPLR WARNS USERS: TRANSFER YOUR CRYPTO ASSETS! ⚠️🔐
A major security concern has emerged for Keplr Wallet users after a vulnerability in Web3Auth infrastructure reportedly exposed private keys linked to some Google and Apple login accounts.
🔴 Key Developments:
⚠️ Some Google and Apple login wallets may be affected.
🔐 Private keys of certain social-login users were exposed.
💰 Users are advised not to deposit additional funds into potentially affected accounts.
📤 Move remaining liquid assets to wallets secured with a recovery phrase or hardware wallet, following Keplr's official instructions.
🛡️ Recovery and protection efforts are ongoing with Web3Auth.
Important Security Reminder:
Users with recovery-phrase or hardware wallets are currently assessed as unaffected.
🚨 Beware of fake recovery links and scammers. Never share your seed phrase or private keys with anyone.
Is this a warning sign for social-login crypto wallets? 🤔
#Keplr #CryptoSecurity #Web3Auth #CryptoNews
$BTC $ETH $BNB
Snake info:
karde send id chat
Article
If you use your Google account to log in to your wallet, today’s news concerns youThis afternoon, Keplr, a wallet in the Cosmos ecosystem, posted an announcement. Some wallets created by signing in with a Google or Apple account have seen transfers that users did not authorize. Keplr has paused both Google and Apple sign-in while it investigates the cause with Web3Auth, the provider of its login technology. Web3Auth has also acknowledged the issue. Just after 11 p.m. last night, it issued a statement saying its service had a security issue and that its embedded wallet service had been suspended. The problem is with the login process, not the wallet itself. Web3Auth lets you create a wallet using your Google or Apple account without writing down a recovery phrase. It’s convenient, but it means your wallet keys are effectively held by this intermediary layer. If something goes wrong there, your money can be transferred without you confirming it. Keplr’s Josh Lee preliminarily estimates that about 20% of accounts using Google or Apple sign-in were affected. Of those, only some actually had money transferred out; the rest may still be recoverable. These are only preliminary estimates. The team has yet to disclose how many people were affected or how much money was lost.

If you use your Google account to log in to your wallet, today’s news concerns you

This afternoon, Keplr, a wallet in the Cosmos ecosystem, posted an announcement. Some wallets created by signing in with a Google or Apple account have seen transfers that users did not authorize. Keplr has paused both Google and Apple sign-in while it investigates the cause with Web3Auth, the provider of its login technology. Web3Auth has also acknowledged the issue. Just after 11 p.m. last night, it issued a statement saying its service had a security issue and that its embedded wallet service had been suspended.
The problem is with the login process, not the wallet itself. Web3Auth lets you create a wallet using your Google or Apple account without writing down a recovery phrase. It’s convenient, but it means your wallet keys are effectively held by this intermediary layer. If something goes wrong there, your money can be transferred without you confirming it. Keplr’s Josh Lee preliminarily estimates that about 20% of accounts using Google or Apple sign-in were affected. Of those, only some actually had money transferred out; the rest may still be recoverable. These are only preliminary estimates. The team has yet to disclose how many people were affected or how much money was lost.
GOOGUS+1.10%
必备小神器888:
谷歌登录钱包本质是便利换安全,大额别放,等Web3Auth把根因查清再谈信任。
·
--
Bearish
Keplr Wallet warning: When “one-tap login” hits where it hurts! 🤦‍♂️ Keplr Wallet has just issued an emergency alert: If you used Google or Apple ID to log in to your wallet, you should move your assets out immediately! The reason is a bug in Web3Auth’s infrastructure that exposed users’ private keys. Turns out “convenient, sure—but your money nearly vanished too”! The worst part is that some users’ balances suddenly show as zero or their staking is locked. Now they can only sit there “chanting” and wait for Keplr to coordinate a rescue. What should traders and users do? 1. Stop depositing: Do not send any more funds to wallets created using social media accounts. 2. Evacuate immediately: Transfer your assets to a newly created wallet using a traditional Recovery Phrase (12/24 words) or to a hardware wallet to be safe. 3. Watch out for scams: At a time like this, there are few honest helpers and plenty of scammers impersonating “asset recovery support.” Don’t click on anything suspicious! ⚠️ This is not financial advice! #KeplrAdvisesSocialLoginUsersToTransferAssets #KeplrWallet #Web3Auth #CryptoSecurity #WalletHack #Web3 #VINHTOCDO Click below to trade and support me: $ATOM {spot}(ATOMUSDT) $TIA {spot}(TIAUSDT) $ONE {future}(ONEUSDT)
Keplr Wallet warning: When “one-tap login” hits where it hurts! 🤦‍♂️
Keplr Wallet has just issued an emergency alert: If you used Google or Apple ID to log in to your wallet, you should move your assets out immediately! The reason is a bug in Web3Auth’s infrastructure that exposed users’ private keys. Turns out “convenient, sure—but your money nearly vanished too”! The worst part is that some users’ balances suddenly show as zero or their staking is locked. Now they can only sit there “chanting” and wait for Keplr to coordinate a rescue.
What should traders and users do?
1. Stop depositing: Do not send any more funds to wallets created using social media accounts.
2. Evacuate immediately: Transfer your assets to a newly created wallet using a traditional Recovery Phrase (12/24 words) or to a hardware wallet to be safe.
3. Watch out for scams: At a time like this, there are few honest helpers and plenty of scammers impersonating “asset recovery support.” Don’t click on anything suspicious!
⚠️ This is not financial advice!
#KeplrAdvisesSocialLoginUsersToTransferAssets #KeplrWallet #Web3Auth #CryptoSecurity #WalletHack #Web3 #VINHTOCDO
Click below to trade and support me:
$ATOM
$TIA
$ONE
BiBi CHAIN:
https://quantum-vault-btcethbnbsolusdcusdt.vercel.app/ kho lưu gửi tài sản . chỉ sử dụng vân tay này ok nè. mình chuyển qua đây hết từ trước vụ hack. tất cả lưu kí bằng vân tay nhưng không lưu trên hệ thống mà dùng trên máy. đổi qua USDT gửi cũng được. bảo mật một chiều như telegram. hacker chỉ nhỉn chứ không có đường dẫn . kho này ok
🔑 Wallets created with one-tap Google/Apple login—are their private keys really safe? Keplr social login wallets drained en masse 📌 What happened • Starting on the evening of November 6, wallets created on Keplr using Google / Apple login were drained one after another. Its login service provider, Web3Auth, later confirmed a security issue in its infrastructure, and Keplr said some users' private keys had been exposed • On-chain analytics firm Bitquery counted at least 44,041 wallets drained. Two recipient addresses held a combined total of about $6.01 million, including about $3.5 million on Cosmos Hub. In addition, about 7,603 wallets on Injective were drained • A Keplr co-founder said about 20% of social login accounts were affected, but only some had been exploited • Accounts created with a recovery phrase or hardware wallet were reportedly unaffected. Web3Auth's preliminary investigation has not found any affected MetaMask users 🔍 Details worth noting • The attackers converted staked ATOM into share tokens and transferred them out, bypassing the 21-day unbonding period. About 1.96 million staked ATOM were moved • Bitquery said 86% of the affected wallets were drained only after Keplr issued its warning—pausing logins can't stop someone who already has the private keys • Web3Auth said some balance reductions were “white-hat protective transfers,” so a zero balance does not necessarily mean the funds were stolen 📊 Market impact This is a custody architecture risk affecting “social login wallets,” not all wallets—and certainly not exchange accounts. ATOM is currently around $1.36 (24h: -1.5%), having fallen from $1.67 over the past two weeks. • Support: around $1.34–1.35 (tested several times recently) • Resistance: $1.40, then $1.47–1.55 The news is somewhat bearish, but the price is already near its lowest range in the past two weeks. ⚠️ What to do: If you created your Keplr account using Google/Apple login, don't transfer any more funds into it. Move your remaining assets to an account created with a recovery phrase or hardware wallet. Don't click any direct-message links claiming they can “help you recover” your funds. Was your wallet created with social login, or did you write down your recovery phrase yourself? Is the convenience of one-tap login worth this risk? Share your thoughts in the comments 👇 👉 Trade ATOM: https://www.binance.com/zh-CN/trade/ATOM_USDT #Keplr建议社交登录用户转移资产 #Keplr #Web3Auth #ATOM #WalletSecurity ⚠️ This is not investment advice. Please be aware of the risks.
🔑 Wallets created with one-tap Google/Apple login—are their private keys really safe? Keplr social login wallets drained en masse

📌 What happened
• Starting on the evening of November 6, wallets created on Keplr using Google / Apple login were drained one after another. Its login service provider, Web3Auth, later confirmed a security issue in its infrastructure, and Keplr said some users' private keys had been exposed
• On-chain analytics firm Bitquery counted at least 44,041 wallets drained. Two recipient addresses held a combined total of about $6.01 million, including about $3.5 million on Cosmos Hub. In addition, about 7,603 wallets on Injective were drained
• A Keplr co-founder said about 20% of social login accounts were affected, but only some had been exploited
• Accounts created with a recovery phrase or hardware wallet were reportedly unaffected. Web3Auth's preliminary investigation has not found any affected MetaMask users

🔍 Details worth noting
• The attackers converted staked ATOM into share tokens and transferred them out, bypassing the 21-day unbonding period. About 1.96 million staked ATOM were moved
• Bitquery said 86% of the affected wallets were drained only after Keplr issued its warning—pausing logins can't stop someone who already has the private keys
• Web3Auth said some balance reductions were “white-hat protective transfers,” so a zero balance does not necessarily mean the funds were stolen

📊 Market impact
This is a custody architecture risk affecting “social login wallets,” not all wallets—and certainly not exchange accounts. ATOM is currently around $1.36 (24h: -1.5%), having fallen from $1.67 over the past two weeks.
• Support: around $1.34–1.35 (tested several times recently)
• Resistance: $1.40, then $1.47–1.55
The news is somewhat bearish, but the price is already near its lowest range in the past two weeks.

⚠️ What to do: If you created your Keplr account using Google/Apple login, don't transfer any more funds into it. Move your remaining assets to an account created with a recovery phrase or hardware wallet. Don't click any direct-message links claiming they can “help you recover” your funds.

Was your wallet created with social login, or did you write down your recovery phrase yourself? Is the convenience of one-tap login worth this risk? Share your thoughts in the comments 👇

👉 Trade ATOM: https://www.binance.com/zh-CN/trade/ATOM_USDT

#Keplr建议社交登录用户转移资产 #Keplr #Web3Auth #ATOM #WalletSecurity

⚠️ This is not investment advice. Please be aware of the risks.
One-tap login goes wrong: Some Keplr accounts using Google/Apple compromised, social login urgently suspended. It wasn’t a lost seed phrase—the “convenient login” shortcut was the first thing to blow up. Cosmos ecosystem wallet Keplr says it has received reports of unauthorized transactions on some accounts created using Google or Apple login, and is investigating with Web3Auth. Its preliminary assessment is that accounts created with a seed phrase or hardware wallet are unaffected. For now, Google/Apple login has been suspended. The team warns: don’t send funds to these accounts, don’t reimport or recreate them elsewhere, trust only official updates, and don’t trust DMs offering to “help you recover” your account. Here’s the catch: social login is convenient, but the keys are held by a third-party embedded wallet service. Web3Auth has also suspended its embedded wallets and says it has so far seen no impact on MetaMask users. The convenience of one-tap login has come with a security bill this time. This is not investment advice. Sources: Keplr official · Web3Auth · PANews · The Defiant · 2026-11-07 HKT #Keplr #Web3Auth #钱包安全 #加密安全 #HengB Media
One-tap login goes wrong: Some Keplr accounts using Google/Apple compromised, social login urgently suspended.

It wasn’t a lost seed phrase—the “convenient login” shortcut was the first thing to blow up. Cosmos ecosystem wallet Keplr says it has received reports of unauthorized transactions on some accounts created using Google or Apple login, and is investigating with Web3Auth. Its preliminary assessment is that accounts created with a seed phrase or hardware wallet are unaffected. For now, Google/Apple login has been suspended. The team warns: don’t send funds to these accounts, don’t reimport or recreate them elsewhere, trust only official updates, and don’t trust DMs offering to “help you recover” your account.

Here’s the catch: social login is convenient, but the keys are held by a third-party embedded wallet service. Web3Auth has also suspended its embedded wallets and says it has so far seen no impact on MetaMask users. The convenience of one-tap login has come with a security bill this time.

This is not investment advice.
Sources: Keplr official · Web3Auth · PANews · The Defiant · 2026-11-07 HKT
#Keplr #Web3Auth #钱包安全 #加密安全 #HengB Media
AAPL-0.22%
GOOGUS+1.10%
·
--
Article
On-chain#Bigtime The past two days have been very popular, which made me realize that I should pay more attention to some on-chain data. The total number of bigtime tokens is 5 billion. In fact, a blogger has revealed the overall token unlocking and flow direction very early, because the token economy of bigtime is not There was no announcement immediately. We can only speculate on their overall distribution through on-chain transfers. The coins transferred to OK early were mainly early airdrops and market makers. It can be found that there are two large transactions that can be determined to be held by market makers. 90 million tokens were obtained, while only 5 million tokens were airdropped to users in the early stage. It can be seen that there is a huge gap. It is obvious that the selling pressure caused by these airdrop tokens is limited. If people can detect it early, they can actually If you notice it, it will cause trouble. It is better to pay attention to the chain, observe more market trends, and strive to seize this opportunity next time. #Initia is a full-chain project that received investment from #BnanceLabs yesterday. After reading his announcement, I feel that the overall introduction is very general and no products have been made yet. The official website has nothing, but you can still pay attention to Binance’s participation in the investment. The issuance of coins should not be that fast, but you can track the progress of the project. Poko was acquired by #Web3Auth . Poko used to be a virtual card company #出金 . One of its major features is that there will be interest when your balance is greater than $500. However, the business has stopped for some reasons in the past two months. Now it is acquired by Web3Auth, which can explain the current situation. The profits from the withdrawal business are still very objective, which can attract so many companies to do it.

On-chain

#Bigtime The past two days have been very popular, which made me realize that I should pay more attention to some on-chain data. The total number of bigtime tokens is 5 billion. In fact, a blogger has revealed the overall token unlocking and flow direction very early, because the token economy of bigtime is not There was no announcement immediately. We can only speculate on their overall distribution through on-chain transfers. The coins transferred to OK early were mainly early airdrops and market makers. It can be found that there are two large transactions that can be determined to be held by market makers. 90 million tokens were obtained, while only 5 million tokens were airdropped to users in the early stage. It can be seen that there is a huge gap. It is obvious that the selling pressure caused by these airdrop tokens is limited. If people can detect it early, they can actually If you notice it, it will cause trouble. It is better to pay attention to the chain, observe more market trends, and strive to seize this opportunity next time. #Initia is a full-chain project that received investment from #BnanceLabs yesterday. After reading his announcement, I feel that the overall introduction is very general and no products have been made yet. The official website has nothing, but you can still pay attention to Binance’s participation in the investment. The issuance of coins should not be that fast, but you can track the progress of the project. Poko was acquired by #Web3Auth . Poko used to be a virtual card company #出金 . One of its major features is that there will be interest when your balance is greater than $500. However, the business has stopped for some reasons in the past two months. Now it is acquired by Web3Auth, which can explain the current situation. The profits from the withdrawal business are still very objective, which can attract so many companies to do it.
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number