Keplr suspended Google and Apple wallet logins after a breach at authentication provider Web3Auth. Bitquery traced approximately $6.01 million in transfers across more than 44,000 wallets, though some moves came from recovery teams.
Keplr has suspended Google and Apple wallet logins after a security breach at Web3Auth exposed some users' private keys. The company said in a November 7 notice that it had received reports of unauthorized transactions on accounts created through social logins. It linked the incident to Web3Auth, a wallet authentication provider owned by Consensys.
Keplr co-founder Josh Lee estimated that roughly 20% of Google and Apple login accounts could be affected, although he said only a fraction had been exploited. Lee also said the problem did not start with Keplr's own software, stating: "This was not a hack of Keplr's code."
Bitquery traces $6M across thousands of wallets
Blockchain intelligence firm Bitquery traced approximately $6.01 million across two collection addresses tied to the November 6–7 incident. It identified 44,041 wallets across seven Cosmos networks, plus 7,603 affected addresses on Injective.
Cosmos Hub accounted for approximately $3.5 million of the recorded assets. Bitquery also found transfers involving 1.96 million staked ATOM that used staking-share tokenization to skip the usual 21-day unbonding period.
However, the totals do not map cleanly to theft. Web3Auth disclosed that authorized recovery teams were moving assets through similar transaction paths, so recovery addresses must be separated from malicious destinations before the transfers count as attacker-controlled losses.
Whitehat recovery and advice for users
Web3Auth and its partners have started whitehat recovery operations to protect funds in vulnerable accounts. Keplr warned that some Google and Apple login wallets might show reduced or empty balances because of those measures.
Keplr told social-login users to move remaining liquid assets into recovery-phrase or hardware wallet accounts. It said wallets created with recovery phrases or hardware devices were not affected.
Keplr has not publicly established whether affected customers will receive reimbursement for confirmed losses.
Source: crypto.news
Trading involves risk.
Risk Disclaimer
