According to CoinMeta, GoPlusSecurity reports that Keplr wallets were affected by a social login vulnerability in Web3Auth, resulting in the exposure of some users' private keys and causing at least $1 million in losses. Approximately $6 million has been transferred to the official recovery address. Affected users are those who created Keplr addresses through Google or Apple login methods; mnemonic phrase and hardware wallet users were not affected. Addresses related to the attackers include: 0x531f1d541fec4a6a6439e7651620f66f8d854c1d, 0xeaaa5fca4c7daa7bb99b3ece6da68040f916d857, etc. Security recommendations include: paying attention to official announcements, stopping the sending of new funds to the original social login accounts, creating new mnemonic phrase or hardware wallet accounts, and following official guidance for handling pledged or locked assets.