Keplr, a long-established wallet in the Cosmos ecosystem, allows users to log in directly with their Google or Apple accounts without needing to copy a mnemonic phrase. This functionality relies on the third-party service Web3Auth. Now, Web3Auth has a vulnerability, and Keplr has confirmed that the private keys of some users who logged in this way have been compromised. Previously, some accounts had experienced unauthorized transfers, leading to the suspension of Google and Apple logins. Most worryingly, some users have found their wallet balances significantly reduced, or even completely depleted. Keplr states that this may be a protective measure: Keplr is assisting Web3Auth in moving assets from affected accounts to a secure location. However, users cannot currently determine whether their money has been recovered or stolen. Tools to check account security are still under development. Accounts created using mnemonic phrases or hardware wallets are unaffected. For users who logged in via social media, Keplr advises against transferring new funds to their original accounts and to transfer any remaining funds to their mnemonic phrase or hardware wallet accounts as soon as possible. The initial reason was to avoid the step of copying mnemonic phrases, but in the end, the money was less, and even whether it was stolen or rescued, they had to wait for someone else to tell them.