🚨 Keplr Update: $6M Crypto Movement Was Partly a White-Hat Rescue!

A major clarification has emerged from the Web3Auth security incident. On November 8, Keplr confirmed that some funds moved during the incident were actually transferred to authorized recovery wallets to protect users from attackers.

🔍 What Really Happened?

Blockchain intelligence firm Bitquery tracked approximately $6.01 million in transfers across 44,000 wallets on seven Cosmos networks, plus additional activity on Injective.

However, Web3Auth clarified that two major destinations were recovery wallets:

- Cosmos Hub: approximately $3.5 million.
- Osmosis: approximately $1.04 million.

This means $6.01 million is the total tracked movement, NOT confirmed stolen funds. The actual attacker losses and recovered amounts remain unclear.

⚠️ Who Was Affected?

The incident began on November 6, prompting Web3Auth to suspend its embedded wallet services. Keplr also paused Google and Apple login options after detecting unauthorized transactions affecting some social-login accounts.

Accounts using recovery phrases or hardware wallets were reportedly unaffected.

🛡️ Important Security Warning

Some affected users may see reduced or empty balances while recovery operations continue. Both companies urge users to follow official announcements and avoid suspicious recovery links or private messages.

💡 The Bigger Lesson

Social-login wallets offer convenience, but they also introduce reliance on third-party authentication providers. When that layer is compromised, users' funds can be at risk even without exposing their seed phrases.

📊 Market Impact

Bitcoin remained near $75,900, while Ethereum traded around $2,237, with both showing relatively little movement since the incident began.

Remember: Not every large crypto transfer means a hack. Verify the destination and purpose before drawing conclusions.

For informational purposes only, not financial advice. Always DYOR.

#CryptoSecurity #CryptoNews #BlockchainSecurity #WhiteHatHacker #DYOR