Originally reported by Foresight News on November 14, 2026, at 14:04 (UTC+8). Web3Auth said an infrastructure security issue on November 7 affected some embedded wallets created through Google or Apple sign-in, leading to unauthorized access to some accounts. The affected wallets included those used by Torus Wallet and third-party apps such as Keplr.
Web3Auth said it began a white-hat asset recovery operation on November 8, moving at-risk assets to secure recovery wallets and publishing verification addresses across multiple chains. The report does not provide those addresses.
For existing users, Web3Auth said login functionality was gradually being restored, but an upgrade to SDK v10 or v11 was required. New-user registration was expected, not confirmed, to reopen by November 23, 2026, on the migrated Legacy network.