Keplr social-login wallets saw unauthorized transactions on Nov 7, 2026. Only accounts created via Google/Apple login were affected.

Co-founder Josh Lee put early estimate at about 20% of Google/Apple accounts potentially compromised, with funds actually stolen from only part of them. Keplr code was not hacked, issue pointed to third-party auth provider Web3Auth.

Wallets with recovery phrase and hardware wallets were not affected per early check. Web3Auth paused embedded wallets, Keplr paused social login.

Keplr with Web3Auth and MetaMask is tracking stolen funds and working on access recovery. Total loss unknown.

Do not send funds to affected social-login addresses and ignore DM recovery offers.