Web3Auth said a security issue in its infrastructure on November 7, 2026, led to unauthorized access to some accounts. The issue affected some embedded wallets created through Google or Apple sign-in, including wallets used by third-party apps such as Torus Wallet and Keplr.
In an update reported by Foresight News on November 14, 2026, at 14:04 (UTC+8), Web3Auth said it had begun a white-hat asset recovery operation on November 8. The operation moves assets at risk to secure recovery wallets; Web3Auth also published verification addresses on multiple chains.
Existing-user login was being restored gradually, with an upgrade to SDK v10 or v11 required. Web3Auth expected new-user registration to reopen on the migrated Legacy network by November 23, 2026. That was a projected date, not a confirmation that registration had reopened.