Web3Auth Restores Wallet Access as It Prepares Asset Returns

Web3Auth restored login and wallet access for existing users after disclosing an infrastructure flaw that exposed some Google- and Apple-linked embedded wallets, while recovery work continues.

Existing users can sign in through Web3Auth’s Plug & Play and Single Factor Auth (SFA) software development kits. Affected services include Torus Wallet and embedded wallets used by third-party apps such as Keplr. The update follows earlier coverage of exposed Keplr social-login keys.

Web3Auth said assets from affected wallets remain in secure custody as recovery efforts continue. The company expects to outline how users can get those assets back in the coming days.

Some features remain restricted. Existing SFA users can sign in, but new registrations are temporarily limited. Web3Auth has deprecated SDK v9 and earlier versions, and developers need to upgrade to v10 or v11. Developers on the Sapphire network can enable new registrations by migrating to the latest SDK. Web3Auth plans to restore registrations on its Legacy network before Nov. 23, 2026.

Web3Auth warned users not to share seed phrases, private keys or login credentials and to ignore unsolicited messages offering asset recovery.