Web3Auth pauses embedded wallet service after security issue, Keplr users hit

MetaMask users appear unaffected, but Cosmos wallet Keplr disabled social logins after unauthorized transactions surfaced Web3Auth, the embedded wallet provider now folded into MetaMask under Consensys, has temporarily paused its embedded wallet service after identifying a critical security issue. The company says there is no evidence MetaMask users were affected. The same cannot be said for everyone who built on top of its infrastructure. The pause took effect on November 6, 2026, at approximately 21:13 UTC. Web3Auth said it shut things down to investigate the possible impact of the issue. The fallout landed hardest on third-party integrators. Chief among them was Keplr Wallet, a popular wallet in the Cosmos ecosystem. How the incident spread to Keplr Keplr used Web3Auth to power social logins, letting users sign in with Google and Apple accounts instead of managing a seed phrase. Keplr reported unauthorized transactions beginning around November 6, the same date Web3Auth flagged its issue. After tracing the problem back to Web3Auth, Keplr disabled its Google and Apple login options on November 7 to limit further risk. The exposure was not universal across Keplr’s user base. Rough...