Keplr pauses Google and Apple logins after Web3Auth flaw drains about $6 million
Cosmos wallet Keplr has suspended Google and Apple sign-in after a weakness at Web3Auth, the Consensys-owned login provider, exposed private keys for some social-login accounts. Bitquery data traces roughly $6 million taken from about 44,000 wallets across several Cosmos chains and Injective, with Cosmos Hub the largest share. Keplr says its own code was not at fault and that seed-phrase and hardware-wallet accounts appear unaffected. Web3Auth has paused its embedded-wallet service and started whitehat recovery; no reimbursement plan has been announced.