CryptoMedium•8 November 2026•
1 min read
Web3Auth Vulnerability Triggers $6 Million in Unauthorized Transfers on Cosmos Network
Key Facts
1A security vulnerability at Web3Auth exposed private keys, triggering $6 million in unauthorized transfers across the Cosmos network.
A security vulnerability at Web3Auth exposed private keys, triggering $6 million in unauthorized transfers across the Cosmos network. Bitcoin.com reported that Keplr wallet suspended Google and Apple login features in response to the breach, which compromised infrastructure used for cloud-based key management.
The unauthorized activity affected networks including Cosmos Hub, Osmosis, and Injective, with analytics identifying approximately 44,700 distinct private keys involved. Josh Lee, co-founder of Keplr developer Chainapsis, clarified that the vulnerability originated with Web3Auth rather than Keplr’s software, while reports indicate that recovery operations are underway to move vulnerable assets into protective custody.