The Hacker News reports that a Web3Auth security flaw was exploited to access Keplr wallets created with Google or Apple sign-in. Keplr said the flaw caused a private key breach for some users, while Web3Auth said it used the same route to empty other at-risk wallets and moved funds into recovery wallets with Keplr’s help. Wallets using a recovery phrase or hardware wallet are not affected, and Google/Apple sign-in has been paused. The article includes user guidance, a recovery address list, and estimates from Keplr and GoPlus. https://thehackernews.com/2026/11/web3auth-flaw-exploited-to-steal-keplr.html