Keplr just confirmed it. Social login was the weak path... Sign-in with Google is not self-custody. Keplr paused Google and Apple login after reports of unauthorized transactions on some social-login accounts. Recovery-phrase and hardware-wallet accounts are not affected, per Keplr's initial assessment. Hours earlier, Web3Auth paused its embedded wallet service over a security issue affecting some third parties. It said it found no evidence MetaMask users were hit. Keplr's advice for social-login users: do not send new funds to that account. Do not re-import it. Ignore every "recovery" DM. The seed phrase path keeps the key on your side. The social login path rebuilds signing through a provider. Convenience and custody are not the same product. If your "non-custodial" wallet was created with Google or Apple, did you ever hold the key yourself?
PetrAntoShare

Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.