Web3Auth disputes the reported $6.01 million loss involving Keplr wallets affected by a vulnerability in its services on November 6 and 7, 2026. The company says some on-chain movements labelled as theft were whitehat recoveries conducted by Web3Auth and its partners and routed to verified addresses. Bitquery tracked more than 44,041 affected wallets in the Cosmos ecosystem and 7,603 on Injective, while Keplr co-founder Josh Lee said roughly 20% of wallets created with Google and Apple logins were compromised. Wallets created with recovery phrases or hardware devices were unaffected. Web3Auth and Keplr urged users to ignore unofficial recovery offers, stop depositing funds into affected accounts and transfer their assets to secure accounts.
Source: Read the original article
