At least $6.01 million was stolen from Keplr wallets between November 6 and 7, 2026, according to Bitquery’s analysis. The compromised funds are linked to private keys exposed in accounts opened through Google or Apple, whose key management was handled by the third-party provider Web3Auth. The analysis identified roughly 44,700 affected wallets, including 44,041 on Cosmos ecosystem chains and 7,603 on Injective, with approximately $3.5 million lost on Cosmos Hub alone. About 1.96 million staked ATOM were moved without the usual 21-day unbonding period, while 86% of the drained funds on linked networks were transferred after Keplr issued its warning on November 7. Keplr suspended Google and Apple logins, but the exact technical cause, final loss total, and recoverable amount had not been disclosed as of November 8, 2026.
Source: Read the original article
