Web3Auth Restores Access to Affected Wallets, Plans to Announce Asset Return Process

According to ChainCatcher, Web3Auth has restored wallet access for users affected by a security incident involving a vulnerability in its infrastructure. The incident enabled unauthorized access to some embedded wallets created through Google or Apple sign-in, including Torus Wallet and wallets used by third-party apps such as Keplr. The affected funds are being held securely by the project, which is coordinating their return and expects to announce the process in the coming days. Recovery efforts are ongoing. Login and wallet access have resumed for existing users of Web3Auth Plug & Play and the Single Factor Auth (SFA) SDK, though some restrictions remain. Web3Auth SDK v9 and earlier versions have been deprecated, and developers must upgrade to v10 or v11. Existing SFA users can log in, but new registrations are temporarily restricted. Developers on the Sapphire network can enable new registrations by migrating to the latest SDK; the feature is planned to return on the Legacy network by November 23, 2026. Web3Auth warned users about impersonation scams offering asset recovery and advised them not to share seed phrases, private keys, or login credentials, or trust unsolicited recovery offers.