Keplr disabled Google and Apple logins on Nov. 7, 2026, after reporting unauthorized transactions involving social-login accounts following a security issue disclosed by its authentication provider, Web3Auth. Early estimates suggested about 20% of social-login accounts were affected, but only a fraction had reportedly been exploited. Accounts using recovery phrases or hardware wallets remain unaffected.
Bitquery identified at least $6.01 million in transfers across multiple Cosmos networks on Nov. 6–7, but that is not a verified theft figure. Keplr and Web3Auth said authorized recovery operations also moved vulnerable assets, and Keplr identified recovery addresses that overlapped with wallets in Bitquery’s analysis. The companies have not disclosed the precise technical cause, a definitive loss figure or a comprehensive reimbursement schedule. Keplr cautioned that some users may see empty balances because assets were moved for safekeeping.
