Keplr Wallet Sounds Alarm Over Unauthorized Transactions on Social Login Accounts

Keplr Wallet has flagged unauthorized transactions on some accounts created through Google or Apple login, saying it is investigating a security issue tied to Web3Auth. The alert surfaced via Cointelegraph, which reported the wallet's notice without yet detailing the scale of the damage. The Cosmos ecosystem's best-known wallet did not say how many accounts were hit or how much was moved. That silence is the uncomfortable part: social login accounts are pitched as the easy way in for people who don't want to wrangle a seed phrase. That convenience is exactly the exposure. When a wallet outsources key handling to a third-party onboarding provider, a flaw on that provider's side can reach users who never touched a private key themselves. Keplr named Web3Auth as the focus of its investigation but hasn't published a breakdown of what went wrong. Keplr is the dominant gateway to Cosmos-based chains, so a security problem inside it ripples well beyond one app. Users who signed up through Google or Apple are now the group watching for updates. So far, Keplr's public response amounts to an alert and an investigation in progress. What comes next — a post-mortem, a patch, or compensation — hasn't been announced.

entities:[