web3auth

9,635 views
22 Discussing
陈小萌
·
--
Over $6 million drained from at least 44,000 wallets using Google login ▫️Keplr confirmed unauthorized transfers from accounts signed in with Google or Apple; the issue lies with the social login service Web3Auth ▫️On-chain data shows at least 44,000 wallets affected, with about $6.01 million involved; the funds have not yet been transferred out ▫️Even after the official warning, 86% of the victims’ wallets were still drained ▫️The attackers also bypassed the 21-day unbonding period and withdrew about 1.96 million staked ATOM Accounts using seed phrases or hardware wallets don’t appear to have been affected so far; these two social login options have been suspended One-click login is convenient, but you may not actually hold the keys Will you still feel comfortable logging into your wallet with a social account? 👇 (Not investment advice) #Keplr #Web3Auth #WalletSecurity
Over $6 million drained from at least 44,000 wallets using Google login
▫️Keplr confirmed unauthorized transfers from accounts signed in with Google or Apple; the issue lies with the social login service Web3Auth
▫️On-chain data shows at least 44,000 wallets affected, with about $6.01 million involved; the funds have not yet been transferred out
▫️Even after the official warning, 86% of the victims’ wallets were still drained
▫️The attackers also bypassed the 21-day unbonding period and withdrew about 1.96 million staked ATOM
Accounts using seed phrases or hardware wallets don’t appear to have been affected so far; these two social login options have been suspended
One-click login is convenient, but you may not actually hold the keys
Will you still feel comfortable logging into your wallet with a social account? 👇 (Not investment advice)
#Keplr #Web3Auth #WalletSecurity
【Google-login wallets were stolen! Keplr shuts down social logins overnight】 On November 7, Keplr, a popular Cosmos wallet, suspended Google and Apple logins: assets were transferred without authorization from some wallets created using social accounts. The issue involved Web3Auth, the third party responsible for social logins. Wallets using a recovery phrase or hardware wallet are unaffected. Don’t deposit funds into these kinds of accounts, and anyone who privately messages you claiming they can “help recover” your funds is a scammer. $ATOM $OSMO #Keplr #Web3Auth #WalletSecurity
【Google-login wallets were stolen! Keplr shuts down social logins overnight】
On November 7, Keplr, a popular Cosmos wallet, suspended Google and Apple logins: assets were transferred without authorization from some wallets created using social accounts. The issue involved Web3Auth, the third party responsible for social logins. Wallets using a recovery phrase or hardware wallet are unaffected. Don’t deposit funds into these kinds of accounts, and anyone who privately messages you claiming they can “help recover” your funds is a scammer.
$ATOM $OSMO
#Keplr #Web3Auth #WalletSecurity
【Security Alert】Web3Auth has suspended its embedded wallet service due to a security issue, and unauthorized transactions have been reported on some Keplr accounts using social login. Here are the key facts: 1. The affected accounts were created with Keplr using Google or Apple sign-in. Accounts created with a recovery phrase or hardware wallet are preliminarily believed to be unaffected. 2. Web3Auth says some third-party platforms were affected and has urgently suspended its embedded wallet service. Initial investigations indicate that MetaMask users were not affected. 3. Keplr has reported the issue to Web3Auth and launched a joint investigation. The root cause and further details are pending an official announcement. Three immediate recommendations for users: - If you use a Keplr account created with social login, check your assets and authorization records immediately. If necessary, create a new recovery-phrase wallet and transfer your assets. - Watch out for phishing messages and links from people impersonating official customer support. Rely only on official channels for announcements. - This incident is another reminder: social login lowers the barrier to entry, but private key management depends on a third party, making its risk model very different from self-custody. For large holdings, consider using a recovery phrase with a hardware wallet. Convenience and security always involve trade-offs. Await further official information on the root cause and remediation measures. #Web3安全 #Keplr #Web3Auth
【Security Alert】Web3Auth has suspended its embedded wallet service due to a security issue, and unauthorized transactions have been reported on some Keplr accounts using social login.

Here are the key facts:
1. The affected accounts were created with Keplr using Google or Apple sign-in. Accounts created with a recovery phrase or hardware wallet are preliminarily believed to be unaffected.
2. Web3Auth says some third-party platforms were affected and has urgently suspended its embedded wallet service. Initial investigations indicate that MetaMask users were not affected.
3. Keplr has reported the issue to Web3Auth and launched a joint investigation. The root cause and further details are pending an official announcement.

Three immediate recommendations for users:
- If you use a Keplr account created with social login, check your assets and authorization records immediately. If necessary, create a new recovery-phrase wallet and transfer your assets.
- Watch out for phishing messages and links from people impersonating official customer support. Rely only on official channels for announcements.
- This incident is another reminder: social login lowers the barrier to entry, but private key management depends on a third party, making its risk model very different from self-custody. For large holdings, consider using a recovery phrase with a hardware wallet.

Convenience and security always involve trade-offs. Await further official information on the root cause and remediation measures.

#Web3安全 #Keplr #Web3Auth
【Security Alert】Unauthorized transactions have been reported on some Keplr Wallet accounts using social login. The source of the risk points to Web3Auth, a provider of embedded wallet infrastructure. Incident timeline: 1. Web3Auth officially confirmed a security issue affecting its services and has suspended its embedded wallet services. Some third-party platforms have been affected. Preliminary investigations found no impact on MetaMask users; further details will be announced by the company. 2. Keplr Wallet said it has received multiple reports of unauthorized transactions on accounts created by logging in with Google or Apple. The reports have been forwarded to the Web3Auth team, and the two parties are investigating jointly. 3. The scope of the impact is clearly defined: Keplr accounts created using a seed phrase or hardware wallet are not affected. Only accounts created through Google/Apple social login may be affected. Affected users are advised to check their accounts immediately: - Check account assets and recent authorization records, and stop signing any unfamiliar transactions; - If you use a social login account, move your assets as soon as possible to a new address controlled by a seed phrase or hardware wallet; - Beware of phishing links from people impersonating official support or offering airdrop compensation. Rely only on official announcements. Social login lowers the barrier to using Web3, but relying on third-party infrastructure to manage private keys concentrates risk. This incident is another reminder that self-custody using a seed phrase or hardware wallet remains a safer choice for long-term asset storage. #Web3安全 #Keplr #Web3Auth
【Security Alert】Unauthorized transactions have been reported on some Keplr Wallet accounts using social login. The source of the risk points to Web3Auth, a provider of embedded wallet infrastructure.

Incident timeline:
1. Web3Auth officially confirmed a security issue affecting its services and has suspended its embedded wallet services. Some third-party platforms have been affected. Preliminary investigations found no impact on MetaMask users; further details will be announced by the company.
2. Keplr Wallet said it has received multiple reports of unauthorized transactions on accounts created by logging in with Google or Apple. The reports have been forwarded to the Web3Auth team, and the two parties are investigating jointly.
3. The scope of the impact is clearly defined: Keplr accounts created using a seed phrase or hardware wallet are not affected. Only accounts created through Google/Apple social login may be affected.

Affected users are advised to check their accounts immediately:
- Check account assets and recent authorization records, and stop signing any unfamiliar transactions;
- If you use a social login account, move your assets as soon as possible to a new address controlled by a seed phrase or hardware wallet;
- Beware of phishing links from people impersonating official support or offering airdrop compensation. Rely only on official announcements.

Social login lowers the barrier to using Web3, but relying on third-party infrastructure to manage private keys concentrates risk. This incident is another reminder that self-custody using a seed phrase or hardware wallet remains a safer choice for long-term asset storage.

#Web3安全 #Keplr #Web3Auth
Seeing reports about Keplr: Some accounts created using Google / Apple sign-in have had unauthorized transactions. Keplr is investigating with Web3Auth, and social login has been temporarily suspended. Preliminary guidance: Keplr accounts created with a recovery phrase or hardware wallet do not appear to be affected for now. If you used social login, don’t deposit any more funds for now, and don’t import or recreate the account elsewhere. Web3Auth says its embedded wallet service has been temporarily suspended. So far, MetaMask users do not appear to be affected. Social login is convenient, but when something goes wrong, it can put everyone at risk all at once. Fake support agents offering to “help you recover your account” will surely show up now—trust only official accounts. #Keplr #Web3Auth #WalletSecurity
Seeing reports about Keplr: Some accounts created using Google / Apple sign-in have had unauthorized transactions. Keplr is investigating with Web3Auth, and social login has been temporarily suspended.

Preliminary guidance: Keplr accounts created with a recovery phrase or hardware wallet do not appear to be affected for now. If you used social login, don’t deposit any more funds for now, and don’t import or recreate the account elsewhere. Web3Auth says its embedded wallet service has been temporarily suspended. So far, MetaMask users do not appear to be affected.

Social login is convenient, but when something goes wrong, it can put everyone at risk all at once. Fake support agents offering to “help you recover your account” will surely show up now—trust only official accounts.
#Keplr #Web3Auth #WalletSecurity
AAPL-0.07%
GOOGUS+1.10%
Article
If you use your Google account to log in to your wallet, today’s news concerns youThis afternoon, Keplr, a wallet in the Cosmos ecosystem, posted an announcement. Some wallets created by signing in with a Google or Apple account have seen transfers that users did not authorize. Keplr has paused both Google and Apple sign-in while it investigates the cause with Web3Auth, the provider of its login technology. Web3Auth has also acknowledged the issue. Just after 11 p.m. last night, it issued a statement saying its service had a security issue and that its embedded wallet service had been suspended. The problem is with the login process, not the wallet itself. Web3Auth lets you create a wallet using your Google or Apple account without writing down a recovery phrase. It’s convenient, but it means your wallet keys are effectively held by this intermediary layer. If something goes wrong there, your money can be transferred without you confirming it. Keplr’s Josh Lee preliminarily estimates that about 20% of accounts using Google or Apple sign-in were affected. Of those, only some actually had money transferred out; the rest may still be recoverable. These are only preliminary estimates. The team has yet to disclose how many people were affected or how much money was lost.

If you use your Google account to log in to your wallet, today’s news concerns you

This afternoon, Keplr, a wallet in the Cosmos ecosystem, posted an announcement. Some wallets created by signing in with a Google or Apple account have seen transfers that users did not authorize. Keplr has paused both Google and Apple sign-in while it investigates the cause with Web3Auth, the provider of its login technology. Web3Auth has also acknowledged the issue. Just after 11 p.m. last night, it issued a statement saying its service had a security issue and that its embedded wallet service had been suspended.
The problem is with the login process, not the wallet itself. Web3Auth lets you create a wallet using your Google or Apple account without writing down a recovery phrase. It’s convenient, but it means your wallet keys are effectively held by this intermediary layer. If something goes wrong there, your money can be transferred without you confirming it. Keplr’s Josh Lee preliminarily estimates that about 20% of accounts using Google or Apple sign-in were affected. Of those, only some actually had money transferred out; the rest may still be recoverable. These are only preliminary estimates. The team has yet to disclose how many people were affected or how much money was lost.
GOOGUS+1.10%
必备小神器888:
谷歌登录钱包本质是便利换安全,大额别放,等Web3Auth把根因查清再谈信任。
One-tap login goes wrong: Some Keplr accounts using Google/Apple compromised, social login urgently suspended. It wasn’t a lost seed phrase—the “convenient login” shortcut was the first thing to blow up. Cosmos ecosystem wallet Keplr says it has received reports of unauthorized transactions on some accounts created using Google or Apple login, and is investigating with Web3Auth. Its preliminary assessment is that accounts created with a seed phrase or hardware wallet are unaffected. For now, Google/Apple login has been suspended. The team warns: don’t send funds to these accounts, don’t reimport or recreate them elsewhere, trust only official updates, and don’t trust DMs offering to “help you recover” your account. Here’s the catch: social login is convenient, but the keys are held by a third-party embedded wallet service. Web3Auth has also suspended its embedded wallets and says it has so far seen no impact on MetaMask users. The convenience of one-tap login has come with a security bill this time. This is not investment advice. Sources: Keplr official · Web3Auth · PANews · The Defiant · 2026-11-07 HKT #Keplr #Web3Auth #钱包安全 #加密安全 #HengB Media
One-tap login goes wrong: Some Keplr accounts using Google/Apple compromised, social login urgently suspended.

It wasn’t a lost seed phrase—the “convenient login” shortcut was the first thing to blow up. Cosmos ecosystem wallet Keplr says it has received reports of unauthorized transactions on some accounts created using Google or Apple login, and is investigating with Web3Auth. Its preliminary assessment is that accounts created with a seed phrase or hardware wallet are unaffected. For now, Google/Apple login has been suspended. The team warns: don’t send funds to these accounts, don’t reimport or recreate them elsewhere, trust only official updates, and don’t trust DMs offering to “help you recover” your account.

Here’s the catch: social login is convenient, but the keys are held by a third-party embedded wallet service. Web3Auth has also suspended its embedded wallets and says it has so far seen no impact on MetaMask users. The convenience of one-tap login has come with a security bill this time.

This is not investment advice.
Sources: Keplr official · Web3Auth · PANews · The Defiant · 2026-11-07 HKT
#Keplr #Web3Auth #钱包安全 #加密安全 #HengB Media
AAPL-0.07%
GOOGUS+1.10%
·
--
Article
On-chain#Bigtime The past two days have been very popular, which made me realize that I should pay more attention to some on-chain data. The total number of bigtime tokens is 5 billion. In fact, a blogger has revealed the overall token unlocking and flow direction very early, because the token economy of bigtime is not There was no announcement immediately. We can only speculate on their overall distribution through on-chain transfers. The coins transferred to OK early were mainly early airdrops and market makers. It can be found that there are two large transactions that can be determined to be held by market makers. 90 million tokens were obtained, while only 5 million tokens were airdropped to users in the early stage. It can be seen that there is a huge gap. It is obvious that the selling pressure caused by these airdrop tokens is limited. If people can detect it early, they can actually If you notice it, it will cause trouble. It is better to pay attention to the chain, observe more market trends, and strive to seize this opportunity next time. #Initia is a full-chain project that received investment from #BnanceLabs yesterday. After reading his announcement, I feel that the overall introduction is very general and no products have been made yet. The official website has nothing, but you can still pay attention to Binance’s participation in the investment. The issuance of coins should not be that fast, but you can track the progress of the project. Poko was acquired by #Web3Auth . Poko used to be a virtual card company #出金 . One of its major features is that there will be interest when your balance is greater than $500. However, the business has stopped for some reasons in the past two months. Now it is acquired by Web3Auth, which can explain the current situation. The profits from the withdrawal business are still very objective, which can attract so many companies to do it.

On-chain

#Bigtime The past two days have been very popular, which made me realize that I should pay more attention to some on-chain data. The total number of bigtime tokens is 5 billion. In fact, a blogger has revealed the overall token unlocking and flow direction very early, because the token economy of bigtime is not There was no announcement immediately. We can only speculate on their overall distribution through on-chain transfers. The coins transferred to OK early were mainly early airdrops and market makers. It can be found that there are two large transactions that can be determined to be held by market makers. 90 million tokens were obtained, while only 5 million tokens were airdropped to users in the early stage. It can be seen that there is a huge gap. It is obvious that the selling pressure caused by these airdrop tokens is limited. If people can detect it early, they can actually If you notice it, it will cause trouble. It is better to pay attention to the chain, observe more market trends, and strive to seize this opportunity next time. #Initia is a full-chain project that received investment from #BnanceLabs yesterday. After reading his announcement, I feel that the overall introduction is very general and no products have been made yet. The official website has nothing, but you can still pay attention to Binance’s participation in the investment. The issuance of coins should not be that fast, but you can track the progress of the project. Poko was acquired by #Web3Auth . Poko used to be a virtual card company #出金 . One of its major features is that there will be interest when your balance is greater than $500. However, the business has stopped for some reasons in the past two months. Now it is acquired by Web3Auth, which can explain the current situation. The profits from the withdrawal business are still very objective, which can attract so many companies to do it.
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number