Are there any official reports, procedures, or verification regarding a compromise of Keplr?
I really wouldn’t want my ATOMs drained. That would truly hurt…
Is there any emergency procedure I should follow?
I have liquid staking disabled. I use Atomic Wallet, and I use Keplr in both Firefox and Chrome.
According to AI, it’s fine.
Is it possible to convert an existing wallet into a multisig wallet?
And require, for example, 2 out of 3 signatures for transactions?
Thanks.
Just use a ledger or keystone hardware wallet to store your atom tokens. Use dice rolls if you don’t trust their entropy. Slap a passphrase on it too while you’re at it and you’re golden.
Nothing is safe at the moment, stay on high alert & never allow any AI access to your private keys via software evaluation. Agentic hacking is at a all time high.
1 Like
Reposting from Cosmos Hub’s X - Follow updates on Keplr’s and Web3Auth’s official channels.
From what Keplr has shared so far, the issue is with accounts created through Google or Apple login (the Web3Auth option). Keplr says accounts set up with a recovery phrase or a hardware wallet are not affected.
So the first thing to check is how you created your Keplr account. If it was with Google or Apple, Keplr’s advice is to stop depositing to it and move any liquid assets to a wallet secured by a recovery phrase or hardware wallet. Staked ATOM takes longer, since unstaking has a waiting period.
On multisig: you can’t convert an existing address into a multisig. A multisig is a new, separate address, so you’d create it and then move your funds there.
And please be careful with anyone who DMs you offering to “recover” funds. Only follow Keplr’s and Web3Auth’s official channels.