Summary

  • Keplr suspended Google and Apple wallet logins on November 6 2026 after a Web3Auth security breach exposed private keys.
  • Attackers drained at least $6 million across eight Cosmos ecosystem wallets, with 44700 accounts showing unauthorized transactions.
  • Recovery phrase and hardware wallet users remain unaffected, as the flaw originated in Web3Auth's infrastructure rather than Keplr's core code.

Keplr suspended Google and Apple login options on November 6 2026 after users reported unauthorized transactions. A Web3Auth vulnerability exposed private keys for wallets created through those social login methods. Users who relied on these options now face drained accounts.

The broader Cosmos ecosystem watches for further fallout. The suspension directly affected new deposits and ongoing access for impacted wallets. Keplr advised users to stop funding potentially compromised accounts until the issue is resolved.

Context

Wallet providers in the Cosmos network have long offered social login options to lower onboarding friction. These methods rely on third-party services such as Web3Auth to handle key generation and recovery. When those services fail, the convenience they provide turns into a single point of failure for thousands of users.

Recovery phrase and hardware wallet holders avoided exposure entirely. This contrast shows how third-party authentication layers can introduce risks that standard self-custody setups do not face.

Details

The breach allowed attackers to obtain private keys tied to Google and Apple logins. Web3Auth confirmed the vulnerability existed inside its own infrastructure. As a result, 44700 wallets saw unauthorized transactions begin on November 6 2026.

"Web3Auth said a vulnerability in its own infrastructure led to private keys leaking from some Keplr wallets created with Google or Apple login."

, Web3Auth (www.youtube.com)

Keplr responded by disabling the affected login flows and issuing public guidance. Reports placed total losses at $6 million across eight Cosmos wallets. Affected users were told not to deposit new funds while investigations continued.

Reaction

Social Highlight · @keplrwallet · unknown

What this means for Keplr users If you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected. (https://x.com/keplrwallet/status/2119117067500806350)

Outlook

Keplr will need to restore social login options only after Web3Auth demonstrates hardened controls. Wallet providers across Cosmos are likely to review their own reliance on similar third-party authentication services in the coming weeks.