Keplr Wallet Security Issue: Google Login Paused, Who Is at Risk?

Keplr Wallet Security Issue: Is Your Google Login Account Safe?

As of November 9, 2026, the Keplr wallet security issue today keeps Keplr Google login paused, with Apple sign-in off too. 

Per the first X alert, posted November 7 at 04:38 UTC (10:08 AM IST), Keplr unauthorized transactions were reported on some accounts created through those logins. 

Keplr news today matters to every social wallet user, and this crypto news today is still developing.

What Is Web3Auth and Why Was It Paused?

They provides infrastructure behind many wallets, including Google and Apple options. 

Web3Auth also covered this news in its tweet on X on November 6 at 21:13 UTC (02:43 AM IST), saying a security issue affected services used by some third-party wallet providers.

Its status page lists the Service in maintenance because of a security incident. 

At 04:54 UTC on November 9, that notice was still displayed. With the Web3Auth embedded wallet service paused, the Web3Auth team has given no restoration date.

Keplr Unauthorized Transactions: Am I Affected?

Keplr recovery phrase vs Google login wallet is the dividing line in the alert:

Keplr hardware wallet users affected or not? Not, per the same alert.

Is Keplr Wallet Safe to Use Now?

Is Keplr safe depends on how an account was created, since the alert ties the Keplr wallet security issue to Google and Apple logins. 

Anyone finding Keplr Apple login not working should know the pause is deliberate. Affected users were asked to:

• Send no new funds to those accounts

• Avoid re-importing or recreating them anywhere

• Trust updates only from the official account

• Ignore DMs or links offering recovery

Is MetaMask Affected by Web3Auth Security Issue?

On the MetaMask question, they said its initial investigation found no evidence that MetaMask users are impacted. 

The Keplr wallet security issue has no official root cause, loss figure, or affected-account count in the posts reviewed.

What Are the Keplr Verified Recovery Addresses Web3Auth Shared?

The Cosmos wallet provider also covered this news in its November 8 update at 06:31 UTC (12:01 PM IST). Web3Auth verified certain addresses as tied to recovery efforts, not exploit activity. 

They span 11 Cosmos networks, including Cosmos Hub, Osmosis and Celestia, plus one EVM address.

It also warned of impersonators and fake recovery DMs.

CZ Warning on Social Login Wallets: What Did He Say?

The CZ Binance warning came in a post on X on November 8 at 16:53 UTC (10:23 PM IST). 

Binance founder CZ urged anyone who used a social login for a crypto wallet to research further, adding “Self custody = self responsibility.”

Expert View: Is Social Login Wallet Safe?

Analysts following crypto news may read the Keplr wallet security issue as a reminder that wallet security can depend on third-party infrastructure. 

A self-custody account backed by a recovery phrase sits outside the reported scope, while Google and Apple accounts do not.

Restoration timing and losses are undisclosed, so conclusions could change. Cosmos users may watch official channels for a embedded wallet update.

Disclaimer: This article is for information only and is not financial, legal, or investment advice. Crypto assets are volatile, and you can lose money. Verify details with official sources before making any decision.