Keplr paused Google and Apple login after unauthorized transactions on some social-login wallets, and Web3Auth says a $6.01 million theft figure included recovery transfers.
Web3Auth disclosed a security issue at about 21:13 UTC on November 6, 2026, and paused its embedded wallet product. Keplr said around 04:38 UTC on November 7 that some Google and Apple login accounts had unauthorized transactions, and it paused those sign-in options. Co-founder Josh Lee said Keplr's own code was not hacked, estimating about 20% of social-login accounts were affected and only a fraction fully exploited. Recovery-phrase and hardware-wallet accounts were not affected, and Web3Auth found no evidence MetaMask users were impacted.
On November 8, Web3Auth disputed the $6.01 million theft estimate, saying some drains were protective recoveries into verified wallets. It published recovery addresses across eleven Cosmos-based networks and eight EVM-compatible chains. Keplr told social-login users not to send new funds to those accounts, not to re-import them, and to ignore unofficial recovery messages.
#Crypto #WalletSecurity #Keplr
DYOR. Not financial advice.
Web3Auth disclosed a security issue at about 21:13 UTC on November 6, 2026, and paused its embedded wallet product. Keplr said around 04:38 UTC on November 7 that some Google and Apple login accounts had unauthorized transactions, and it paused those sign-in options. Co-founder Josh Lee said Keplr's own code was not hacked, estimating about 20% of social-login accounts were affected and only a fraction fully exploited. Recovery-phrase and hardware-wallet accounts were not affected, and Web3Auth found no evidence MetaMask users were impacted.
On November 8, Web3Auth disputed the $6.01 million theft estimate, saying some drains were protective recoveries into verified wallets. It published recovery addresses across eleven Cosmos-based networks and eight EVM-compatible chains. Keplr told social-login users not to send new funds to those accounts, not to re-import them, and to ignore unofficial recovery messages.
#Crypto #WalletSecurity #Keplr
DYOR. Not financial advice.
