Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

Social login

Security incidents tagged Social login. Newest first.

1 Social login incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
1
Patched
0
Days without an incident
0
Longest quiet run: 0 days

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

  • CriticalPartly patched

    Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets

    Web3Auth (Consensys) said on Nov 6 2026 it had paused its embedded-wallet service over a security issue affecting services used by some third parties, with no evidence MetaMask users were impacted. Its status page put the Login Service into maintenance for a security incident from Nov 6 18:30 UTC. On Nov 7 Keplr reported unauthorised transactions on some wallets created with Google or Apple login, paused those social logins, and said recovery-phrase and hardware-wallet accounts are not affected. Later on Nov 7 Web3Auth said it had identified an infrastructure issue affecting certain embedded wallets used by Keplr that led to a private-key breach, and that it and partners had begun whitehat recovery transfers on vulnerable wallets not yet drained, using the same path as the original attacker. Keplr is assisting that recovery; some Google/Apple-login balances may already look reduced or empty because of those mitigation transfers. Neither vendor has published affected counts or loss totals. Users of affected social-login wallets should not send new funds there, should move remaining liquid assets to a recovery-phrase or hardware wallet, and should ignore third-party recovery DMs.

    Web3Auth embedded wallets (used by Keplr Google/Apple login)Since Nov 6, 2026

Posts 5

  • Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets
    Keplr Wallet
    @keplrwallet

    What this means for Keplr users If you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected. In response to Web3Auth’s infrastructure vulnerability leading to private key breach some Keplr users who signed in with Google or Apple, we are assisting the Web3Auth team’s effort to secure and protect assets from affected users. This is ongoing. Staked and locked assets add complexity and take longer. This means some Google/Apple-login accounts may already show a reduced or empty balance as a result of these mitigation efforts. If you created your Keplr account with Google or Apple login, your account may be affected: – Do not send new funds to that account. – Move any remaining liquid assets to a recovery-phrase or hardware-wallet account. We are working with Web3Auth on a way to check whether your account is affected. Only trust updates from this account or @Web3Auth. Ignore DMs or links offering “recovery”.

  • Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets
    Web3Auth
    @Web3Auth

    As part of the security response relating to the incident affecting certain Keplr wallets, we, in connection with our partners, began whitehat recovery activities targeting vulnerable but not yet impacted wallets utilizing the same path of the original attacker.

  • Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets
    Web3Auth
    @Web3Auth

    Following our earlier update, we have identified a security issue in Web3Auth infrastructure affecting certain embedded wallets used by Keplr.

  • Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets
    Keplr Wallet
    @keplrwallet

    We have received reports of unauthorized transactions on some Keplr accounts created with Google or Apple login. We flagged this to the @Web3Auth team and have been working with them on the investigation since. Based on our initial assessment: if you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected. If you created your Keplr account with Google or Apple login, your account may be affected. While we investigate: – Do not send new funds to that account. – Do not re-import or recreate it anywhere. – Google/Apple login is paused for now. – Trust updates only from this account. Ignore DMs or links offering “recovery”. We will share verified details and next steps here as soon as we have them.

  • Web3Auth infrastructure breach exposed private keys for some Keplr Google/Apple-login wallets
    Web3Auth
    @Web3Auth

    We're aware of a security issue affecting Web3Auth's services used by some third parties. We have temporarily paused the embedded wallet service. After an initial investigation, we've found no evidence that MetaMask users are impacted.