Keplr Wallet Pauses Google and Apple Logins After Unauthorized Transactions

The incident puts a spotlight on the trade-off behind social and email-based onboarding: convenience routed through a third-party identity layer, here Web3Auth, becomes a shared dependency whose failure modes sit outside the wallet's own key management. That the exposure appears confined to Google and Apple sign-in accounts, while mnemonic and hardware wallets are unaffected, draws a clear line between custodial-adjacent recovery flows and self-managed keys. Whether the root cause traces to the identity provider or Keplr itself is the open question, and the scope of affected accounts will shape how much scrutiny these login rails face.