Web3Auth Has a Key Problem, but Trust Wallet Stays Off the Hook 🔑

A security breach at Web3Auth, the wallet authentication infrastructure owned by Consensys, exposed private keys for certain Keplr wallets, according to a TrustWallet representative on X. The November 7 incident did not affect Trust Wallet products.

Web3Auth confirmed that a security issue in its infrastructure compromised certain embedded wallets integrated with Keplr, particularly accounts created through Google or Apple login. The company did not specify the number of affected wallets or accounts.

The incident led to emergency suspensions of affected services and recovery efforts. Web3Auth said it was investigating the breach and working to secure affected wallets and restore normal operations.