Originally reported by Foresight News on November 14, 2026, at 14:04 (UTC+8).
Web3Auth said a November 7 infrastructure security issue affected some embedded wallets created through Google or Apple sign-in, including wallets used by third-party applications such as Torus Wallet and Keplr. Some accounts were accessed without authorization. The report does not give a count of affected wallets or users.
Web3Auth said it began a white-hat asset recovery operation on November 8, moving at-risk assets to secure recovery wallets and publishing verification addresses across multiple chains. Existing-user login was gradually being restored, but users needed to upgrade to SDK v10 or v11. New-user registration was expected to reopen on the migrated Legacy network by November 23; it had not yet reopened at the time of the report.
The distinction matters for adoption: restoring access for existing users is not the same as reopening registration for new ones. The report provides no usage figures or evidence of how many affected users had regained access.