Keplr halts Google, Apple logins as $6M wallet drain hits Cosmos

Keplr has suspended Google and Apple wallet logins after a security breach involving Web3Auth exposed users’ private keys, with blockchain investigators tracing more than $6 million in transfers from over 44,000 wallets. Summary Keplr suspended Google and Apple wallet logins after Web3Auth infrastructure exposed some users’ private keys. Bitquery traced approximately $6.01 million in transfers involving more than 44,000 wallets across Cosmos networks. Keplr’s co-founder estimated roughly 20% of social-login accounts were potentially exposed, with fewer actually exploited. Web3Auth began whitehat recovery operations, warning that protective transfers could resemble unauthorized wallet draining activity. Keplr advised social-login users to move remaining liquid assets into secure recovery-phrase or hardware-wallet accounts. In its November 7 security notice, Keplr Wallet confirmed receiving reports of unauthorized transactions involving accounts created through social logins. The company linked the incident to Web3Auth, a wallet authentication provider owned by Consensys, and began working with its team to investigate the affected accounts. We have received reports of unauthorized tr...