An outage at Web3Auth has left about 2% of Avici’s active users unable to log in, while the company has found no unauthorized transfers of user funds. According to Foresight News, the crypto banking app has also paused new registrations and estimates the disruption could last 24 to 48 hours.
Avici said Web3Auth suspended its service as a precaution while investigating a security incident involving an older version of its SDK. Avici said it does not use the affected SDK version and that card payments remain unaffected.
The app advised users who are logged in to stay logged in and not to log out, uninstall the app or clear its data. Users who have logged out can update the app and try to restore access using a key saved on their device.
Web3Auth paused its embedded wallet service on November 7 over a security issue. Some Keplr Wallet accounts that used Google or Apple sign-in then experienced unauthorized transactions.