CryptoMedium•9 November 2026•
1 min read
Web3Auth Flaw Exposes Private Keys for 44,700 Keplr Wallets
Key Facts
1A security flaw at Web3Auth exposed private keys for approximately 44,700 Keplr wallets created via Google or Apple logins.
2On-chain analysis detected $6.01 million in unauthorized asset movements across Cosmos Hub and Osmosis networks.
3Web3Auth identified twelve recovery addresses holding roughly $5.6 million in assets.
A security flaw at Web3Auth exposed private keys for approximately 44,700 Keplr wallets created via Google or Apple logins. Cointribune reported that on-chain analysis detected $6.01 million in unauthorized asset movements across the Cosmos Hub and Osmosis networks following the breach.
Web3Auth identified twelve recovery addresses holding roughly $5.6 million in secured assets for affected users. The vulnerability specifically targeted wallets utilizing third-party authentication, allowing unauthorized access to private keys and asset transfers across the Cosmos ecosystem as of November 9, 2026.