Radar / Other
Keplr Wallet / Web3Auth (Consensys)
Other keplr.app ↗
Reviewed 2026-11-09
Our verdict · Provisional – 1 of 6 checks done
Be careful
Some important points are unclear or concerning.
- Reported concern (2026-11-06): From 6 Nov 2026, users of Keplr wallets created via Google or Apple login reported unauthorised outflows. Web3Auth, the embedded-wallet …
What should I do?
- Check the licence yourself in the official register of the country where it operates.
- Start small – never send more than you can afford to lose.
- Keep screenshots of all payments and conversations.
Based on public sources at the date of review. Not a finding that the company acted unlawfully; the company can respond below.
Questions about Keplr Wallet / Web3Auth (Consensys)
Is Keplr Wallet / Web3Auth (Consensys) safe to use?
RatEx42 rates Keplr Wallet / Web3Auth (Consensys) Amber (provisional, 1 of 6 checks done) as of 2026-11-09: some important points are unclear or concerning. The signal is an assessment of public information, not a finding of unlawful conduct and not advice. Always check the licence in the official register yourself.
Answers are generated from this profile (reviewed 2026-11-09). Sources are linked in “The full check” below.
About
From 6 Nov 2026, users of Keplr wallets created via Google or Apple login reported unauthorised outflows. Web3Auth, the embedded-wallet provider behind the login, confirmed a vulnerability in its infrastructure and paused its embedded wallet service. Keplr disabled social login. Bitquery estimates at least about $6.0m was taken from 44,000+ wallets, but Web3Auth disputes the figure. Web3Auth says it moved about $5.6m to recovery addresses ahead of attackers. No final loss figure or reimbursement timetable has been published. This profile was created from public reports (news, official statements and public posts) by the RatEx42 early-warning search; the concerns are allegations as reported and have not yet been reviewed in full. The company can respond below.
Read more
From 6 Nov 2026, users of Keplr wallets created via Google or Apple login reported unauthorised outflows. Web3Auth, the embedded-wallet provider behind the login, confirmed a vulnerability in its infrastructure and paused its embedded wallet service. Keplr disabled social login. Bitquery estimates at least about $6.0m was taken from 44,000+ wallets, but Web3Auth disputes the figure. Web3Auth says it moved about $5.6m to recovery addresses ahead of attackers. No final loss figure or reimbursement timetable has been published. This profile was created from public reports (news, official statements and public posts) by the RatEx42 early-warning search; the concerns are allegations as reported and have not yet been reviewed in full. The company can respond below.
The full check
🪪LicenceLicensing & registrationNot checked yet
Not yet assessed.
👥Who owns itOwnership & controlNot checked yet
Not yet assessed.
🏦Where your money goesBanking & payment chainNot checked yet
Not yet assessed.
⚖️Regulator actionsRegulatory actionsNot checked yet
Not yet assessed.
📰News & reputationAdverse media & OSINTCaution
Reported concern (2026-11-06): From 6 Nov 2026, users of Keplr wallets created via Google or Apple login reported unauthorised outflows. Web3Auth, the embedded-wallet provider behind the login, confirmed a vulnerability in its infrastructure and paused its embedded wallet service. Keplr disabled social login. Bitquery estimates at least about $6.0m was taken from 44,000+ wallets, but Web3Auth disputes the figure. Web3Auth says it moved about $5.6m to recovery addresses ahead of attackers. No final loss figure or reimbursement timetable has been published.
💬Customer experienceCustomer conductNot checked yet
Not yet assessed.
How we rate: methodology.
Similar providers
Version history
- 2026-11-09 Amber signal Automated profile created from public sources
Are you Keplr Wallet / Web3Auth (Consensys)?
Want to manage this profile – logo, contact details, your statement and a report to share with partners? Claim this profile → Responding below stays free of charge.
You can respond to this profile at any time, free of charge: send a statement for publication or ask us to correct a fact. Please include sources. We review every request and record the outcome.