Keplr Pauses Google and Apple Login After Unauthorized Transaction Reports

Multichain wallet Keplr has paused Google and Apple login after receiving reports of unauthorized transactions on some accounts created through those services. It said it is investigating with wallet-infrastructure provider Web3Auth.

In a Nov. 6 statement, Keplr said its initial assessment found that accounts created with a recovery phrase or a hardware wallet were not affected.

“If you created your Keplr account with Google or Apple login, your account may be affected,” the wallet said.

Keplr told those users to:

• Stop sending new funds to the account.
• Not re-import or recreate the account anywhere.
• Trust updates only from Keplr’s official X account and ignore direct messages or links offering “recovery.”

The warning distinguishes accounts by how they were created. Keplr’s security documentation says its Google-login accounts use Web3Auth to generate a private key rather than a 12- or 24-word recovery phrase. The documentation says the key is encrypted and stored locally on the user’s device.

Web3Auth Also Pauses Its Service

Web3Auth acknowledged a “security issue affecting Web3Auth’s services used by some third parties” in a separate Nov. 6 statement. It said it had temporarily paused its embedded wallet service, which lets applications offer wallets within their products.

“After an initial investigation, we’ve found no evidence that MetaMask users are impacted,” Web3Auth said.

Neither statement identified the cause, quantified losses or gave a count of affected accounts. Keplr said it would share verified details and next steps through its official X account.