🔐 Keplr paused social logins after a Web3Auth breach, and investigators traced over $6M across Cosmos wallets. Here is what happened, who is at risk and what to do now.
🔐 One of the easiest ways to start in crypto just became the risky one for some Keplr users. Here is what the data shows, what is still unknown, and what to do now.
🚨 Logging in with Google or Apple felt safer than writing down a seed phrase. This week, Keplr paused both options after reports of unauthorized transactions. 🤔
📊 What Happened?
Keplr paused Google and Apple logins after users reported funds moving out of their wallets without approval. The wallet posted its statement on November 7 and said the affected accounts were those created through Google or Apple login.
🧩 Where the Problem Started
Keplr co-founder Josh Lee said this was not a hack of Keplr's own code and that the incident began at Web3Auth, the provider behind its social login. Web3Auth acknowledged a security incident on November 6 and paused its embedded wallet service. Keplr's support pages explain that social login keys are created through distributed key generation, which splits the work across several parties so no single one holds the full key.
📉 How Big Is It?
On-chain investigators at Bitquery traced about $6.01M in transfers involving more than 44,000 wallets across Cosmos networks. Lee gave an early estimate that about 20% of Google and Apple login accounts could be affected, though only a fraction have been exploited. At last check, neither Keplr nor Web3Auth had published an official total, so treat the $6M as an estimate.
🛟 What Keplr Advises
Keplr told social login users to stop adding funds and to move their remaining assets to an account created with a recovery phrase or a hardware wallet. My own addition: send a small test transfer first and double check the destination address before moving the rest.
👀 What You Might See
Web3Auth has begun a white-hat recovery effort for exposed accounts. Keplr warned that some Google and Apple login wallets may show reduced or empty balances because of those protection measures, so a low balance does not automatically mean funds are gone.
✅ What Reports Say Is Not Affected
Accounts created with a recovery phrase or a hardware wallet have been described as outside the affected group. Reports also say there have been no attacks on smart contracts or the underlying chain.
🛑 What We Still Don't Know
We don't yet know the exact number of affected accounts, the final loss, or when social login will return. At last check, Web3Auth's embedded wallet service was still paused. The bigger open question is whether other wallets built on the same login infrastructure are exposed, and Web3Auth's investigation will answer that.
🟢 The Bullish Case
The white-hat recovery returns funds, Web3Auth explains the root cause clearly, and social login comes back with stronger safeguards. That would limit the damage to the users already hit.
⚠️ The Risk Scenario
More accounts are drained, other wallets using the same infrastructure turn out to be affected, or the outage drags on. Users who have not moved their funds are the most exposed.
👀 Three Things to Watch Next
Does Web3Auth publish a root cause and an affected account count?
Does the white-hat recovery return funds, and how much?
Do other wallets that use the same login service report problems?
💡 The Takeaway
Keplr paused social logins after a Web3Auth breach, with about $6M traced and an early estimate of 20% of Google and Apple login accounts at risk.
Seed phrase and hardware accounts have been described as outside the affected group, but the full scope is not confirmed.
I would pay particular attention to Web3Auth's investigation, because it will tell us whether this stays a Keplr problem or reaches other wallets. ATOM holders should watch for updates from the Keplr team.
🎯 Do you use a social login wallet, or do you stick to a seed phrase or hardware wallet? And will this change how you store your crypto?
I'm interested in hearing how you decide. Share your view below. 👇
That is the part worth watching.
This post is for informational and educational purposes only and is not financial advice. Crypto markets are volatile. Always conduct your own research before making financial decisions.
#BinanceSquare #KeplrAdvisesSocialLoginUsersToTransferAssets #Cosmos #CryptoSecurity #CryptoNews
