Keplr Halts Social Logins After Web3Auth Key Exposure

Keplr, a wallet provider for the Cosmos ecosystem, suspended Google and Apple sign-in options after a vulnerability in Web3Auth exposed private keys associated with affected accounts. The problem began Friday and led to a wave of unauthorized blockchain transactions, prompting an operational response from Keplr and Web3Auth, according to Bitcoin.com and The Cryptonomist. Bitcoin.com reported that blockchain investigators traced more than $6 million in transfers connected with the incident. That figure represents observed transaction activity rather than a confirmed final theft total, because some assets were moved into addresses identified as recovery destinations while other transfers were unauthorized. Web3Auth and Keplr confirmed on November 8 that some of the transfers constituted recovery work rather than additional theft. The Cryptonomist highlighted one batch involving 2,265.59 staked ATOM withdrawn from six Cosmos Hub accounts and transferred to a published recovery address. Bitcoin.com likewise noted that recovery operations complicate the distinction between total transfers and assets actually lost. The exposure occurred at a shared sign-in layer used by Keplr accounts, illustrating how a vulnerability outside the wallet interface can affect private-key security and on-chain activity across multiple wallets. The affected social-login paths were Google and Apple, and the transactions involved accounts within the Cosmos environment rather than a single reported coin market. The wider crypto market was comparatively subdued during the coverage: total market capitalization stood at $2.6 trillion, the overall market was flat, and Bitcoin was up 0.07% over 24 hours. The Fear and Greed Index registered 28, placing sentiment in Fear. The next point for monitoring is the separation of attacker transfers from verified recoveries and the reconciliation of traced activity with the ultimate amount lost.