Keplr is urging users who created wallets through Google or Apple sign-ins to stop sending funds to those accounts and move remaining transferable assets to wallets created with a mnemonic or hardware wallet. The warning follows a Web3Auth infrastructure vulnerability that exposed private keys for some social-login wallets. In a Nov. 8 update, Keplr said it was assisting Web3Auth with measures to protect affected users, with the response still underway. Some affected accounts may show reduced or zero balances as protective actions are carried out, while staked and locked assets may take longer to process. Keplr has suspended Google and Apple sign-ins, and accounts created with recovery phrases or hardware wallets remain unaffected. Users have been warned to rely only on official Keplr and Web3Auth channels and avoid unsolicited messages or links claiming to restore assets. Web3Auth previously paused its embedded wallet service, while an initial review found no evidence that MetaMask users were affected. The incident has renewed concerns about social logins, which simplify access but tie wallet control to services such as Google, Apple ID, Telegram or email.