Web3Auth: Affected Assets Being Transferred to Secure Recovery Wallets

Web3Auth's follow-up shifts the Keplr incident from disclosure to containment, with affected assets being moved into recovery wallets and a verified address list published as the reference point for users. The transmission path is notable: the exposure traces to private keys tied to social-login accounts, meaning the risk sits in the authentication layer rather than in Keplr's core wallet software, which broadens the implications for other wallets relying on similar key-management providers. Confirmed so far is only the transfer effort and the address list; the total value affected and whether all funds are recoverable remain unstated. Watch whether the verified address list is maintained with timestamps and signed attestations, whether Web3Auth publishes a root-cause and remediation timeline for its social-login key derivation, and whether other integrators of the same SDK disclose exposure.